16,981 Emails Leaked by Kommander0, Like a Packed Concert Hall

A Telegram user operating under the name Kommander0 posted a fresh batch of stolen logins on June 20, 2025, labeled as a "mail access mix." Once HEROIC's team counted the actual entries, the file held 16,981 records, a crowd about the size you'd find packed into a mid-size concert hall.

Why This Is Dangerous

Mail access logs like this one are especially risky because they target the inbox itself, not just a random website login. An email account often controls password resets for banking, shopping, and social media, so getting into one gives an attacker a launchpad into everything else. All 16,981 passwords in this dump were stored in plaintext, wich means there's zero delay between finding an entry and using it.

What Was Exposed

• 16,981 total records exposed
• Email Addresses
• Plaintext Password
• URLs

Why This Matters

Kommander0 has uploaded multiple similar files, and each one adds more fuel to what's already circulating on Telegram. If you recieve suspicious login alerts or notice password reset emails you didn't request, a leak like this could definately be the reason.

How Stealer Logs Work

This type of leak comes from malware that infects a device, often through a cracked app or a fake download, and then copies every saved password, cookie, and visited URL it can find in the browser. The stolen data is bundled into a single file, sometimes labeled as a "mix" when it pulls from several infections at once, before being posted for anyone to grab.

Check If You Are Affected

Rather than wonder if you're one of the 16,981 people affected, take a minute to check. HEROIC's free breach scanner searches a database of more than 400 billion exposed records and will tell you immediately if your email needs a new password.