The 724K Valorant Userpass Target Put 720,090 People at Risk

HEROIC analysts identified this stealer log on 23-Mar-2023. The breach exposed 720,090 records, with stolen data including email addresses, plaintext passwords, and URLs. The source is identified as 724K Valorant Userpass target uploaded by a Telegram User.

Why This Is Dangerous

This breach specifically targeted Valorant player accounts. Valorant is a free-to-play game by Riot Games, but players often spend money on in-game cosmetics and are linked to their broader Riot Games account, which can also include League of Legends and other titles. The breach contains 720,090 email and plaintext password pairs, giving criminals immediate access to these gaming accounts and any connected payment methods.

What Was Exposed

• Email Addresses
• Plaintext Passwords
• URLs

Why This Matters

Gamers frequently reuse the same email and password across gaming platforms, social media, and everyday services. A compromised Riot Games account can be used to access linked email accounts, leading to further account takeovers. Criminals may drain in-game wallets, sell rare accounts, or use the stolen email access to commit identity theft and financial fraud. The scale of this breach, nearly three quarters of a million records, makes it a significant risk for anyone who plays Valorant or other Riot Games titles.

How Stealer Logs Work

Stealer logs are generated by infostealer malware that infects computers through phishing emails, fake game mods, and malicious websites. Once active, the malware captures saved passwords, active sessions, and login credentials. Criminals collect these logs, target specific gaming communities, and distribute the data through private Telegram channels and dark web forums.

Check If You Are Affected

HEROIC offers a free breach scanner that searches 400 billion records. Search your email address now to find out if your credentials appear in this breach or others. Free, takes seconds.