951,917 Records Leaked: ‘UP_KURZL0G’ Private Database Dump

951,917. That's the number of records sitting inside a file labeled "URL PRIVATE DATABASE FRESH UP_KURZL0G 23-10-2025 3," uploaded to Telegram on October 25, 2025. Nearly a million logins, all pulled from the same source and packaged together for anyone willing to grab the file.

Why This Is Dangerous

Its hard to beleive a single file can hold this much stolen data, but stealer log dumps like this one are becoming more common, not less. Every one of these 951,917 records includes a plaintext password, meaning attackers can skip straight to logging in instead of spending time cracking anything. At this scale, automated tools can work through the entire file in a short amount of time.

What Was Exposed

The UP_KURZL0G file contained 951,917 records, confirmed to include:

• Email Addresses
• Plaintext Passwords
• URLs tied to each login

Having the exact site URL seperated out alongside the email and password saves attackers time, they know exactly where each credential is meant to be used.

Why This Matters

With nearly a million records involved, the odds that your information is somewhere in this file are higher than you'd like. If any of these logins match a password you still use, that account should be considered compromised right now, not eventually. Large dumps like this one tend to get passed around and reused by multiple different threat actors over time, not just whoever uploaded it first.

How Stealer Logs Work

A dump this size usually comes from malware infections spread across many different devices, all funneled into one collection point. The malware silently harvests saved browser passwords and autofill data, sending it back to whoever controls it. Eventually that raw information gets cleaned, organized, and labeled, exactly as occured with this "fresh" file, before being shared out to Telegram channels.

Check If You Are Affected

Nearly a million records is a lot to sort through on your own, but you don't have to. HEROIC's free breach scanner checks your email against more than 400 billion leaked records in seconds and lets you know if you were caught up in this leak or any other.