The 95K Mixed MailAccess UHQ: 93,785 Passwords and Emails Leaked

HEROIC analysts identified this stealer log on June 24, 2026. The breach exposed 93,785 records, with stolen data including email addresses, plaintext passwords, and URLs. The source is identified as 95K MIXED MAILACCESS UHQ uploaded by a Telegram User.

Why This Is Dangerous

With nearly 94,000 stolen email and password pairs labeled as mail access credentials, this stealer log is particularly dangerous. Gaining access to someone's email account gives attackers the ability to reset passwords for linked accounts, intercept two-factor authentication codes, and read private messages. Email accounts are often the master key to a person's entire digital life.

What Was Exposed

• Email Addresses
• Plaintext Passwords
• URLs

Why This Matters

The scale of this breach is significant. With 93,785 stolen credentials now available to attackers, victims face serious risks of account takeover, credential stuffing attacks targeting banking and social media platforms, identity theft, and financial fraud. The plaintext nature of the passwords means no cracking is required before attackers can begin attempting logins.

How a Stealer Log Works

Stealer log malware infects a victim's device and silently harvests saved passwords from web browsers, active login sessions, and credentials stored in applications. The collected data is bundled into a log file and distributed through private Telegram channels and dark web marketplaces, often labeled by country or email provider for convenience to buyers.

Check If You Are Affected

HEROIC offers a free breach scanner that searches 400 billion records. Search your email address now to see if your credentials appear here or elsewhere. Free, takes seconds.