The 2KK Fortnite Gaming Leak: More Stolen Records Than You Realize

HEROIC analysts identified this Stealer log on 07-Feb-2023. The breach exposed 1,979,401 records, with stolen data including Email Addresses, Plaintext Passwords, and URLs. The source is identified as 2KK Fortnite Gaming Fresh Target, uploaded by a Telegram User.

Why This Is Dangerous

This stealer log targets Fortnite gaming accounts and contains nearly 2 million email addresses and plaintext passwords. Gaming accounts are frequently linked to payment methods, and attackers can use these credentials to take over accounts, steal in-game items, or access linked financial information. Because the passwords are in plain text, no decryption is needed.

What Was Exposed

• Email Addresses
• Plaintext Passwords
• URLs

Why This Matters

Nearly 2 million exposed credentials create a significant pool for attackers to attempt unauthorized logins. Fortnite accounts with purchased content or linked credit cards are high-value targets. Attackers also try these same username and password combinations on other platforms, putting banking, email, and social media accounts at risk.

How Stealer Logs Work

Stealer logs are created by malware that secretly installs itself on a victim's computer. Once active, it records login credentials as users type them into websites, then transmits that data to the attacker. The collected credentials are bundled into a log file and distributed through private channels like Telegram, where other criminals can purchase or download them.

Check If You Are Affected

HEROIC offers a free breach scanner that searches 400 billion records. Search your email address now to find out if your credentials appear in this breach or others. The scan is free and takes seconds.