22,701 Passwords From the 481-Plutonium Dump Just Hit the Dark Web

HEROIC analysts spotted a stealer log dump labeled "481-60K_plutonium" on Telegram on March 21, 2026. Despite the "60K" in its name, the verified file contains 22,701 usable records, each pairing a login URL with an email address and its plaintext password, pulled straight from infected devices.

Why the Plutonium Dump Is Dangerous

Names like "plutonium" are used by the people who trade these files to make them sound valuable, and in this case the data backs it up. Every password in this file is unencrypted, wich means it can be used immediately, no cracking required. An attacker doesnt need any special skill to start logging into accounts with this data, just the file itself.

What Was Exposed

• 22,701 confirmed login records
• Email addresses tied to each account
• Plaintext, readable passwords
• The exact URLs where each login works

Why This Matters

Reused passwords turn one small leak into a much bigger problem. Attackers plug lists like this into automated tools that try the same email and password combination across banking sites, email providers, and online stores, a technique called credential stuffing. Once one of those logins works, account takeover and financial loss usually follow fast.

How Stealer Log Dumps Like Plutonium Are Built

Information-stealing malware typically spreads through cracked software, fake downloads, or phishing emails. Once it lands on a device, it quietly copies saved browser passwords, autofill data, and active sessions, then packages everything into a text file the attacker can sell or trade. Files like this one get renamed and repackaged multiple times as they move through different Telegram channels, which is likely how "481-60K_plutonium" got its label.

Check If You Are Affected

With over 22,000 working credentials in this single file, it is worth checking your exposure today. HEROIC's free breach scanner searches a database of more than 400 billion leaked records, including this dump, so you know exactly what to change.