About.com Logins Leaked: 7,280 Passwords Exposed, Act Now

HEROIC analysts found a stealer log dump, titled "about.com - 7.280 emails," posted to a Telegram channel on June 10, 2026. The file contains 7,280 records, each pairing an email address with a plaintext password and the URL of the account it belongs to. This data was pulled from infected devices by malware, not from a breach of About.com's own systems, but that distinction does not make the exposure any less real for the people whose logins ended up in this file. If you have an About.com account, this is worth checking today, not next week.

Why This Is Dangerous

Every password in this file was captured in plaintext straight from a victim's browser, so there is nothing for an attacker to crack or guess. Each record already includes the exact site the credential unlocks, meaning an attacker can log in immediately. With 7,280 accounts in this batch, that is thousands of opportunities for account takeover the moment this file starts circulating more widely.

What Was Exposed

• Email addresses
• Plaintext passwords
• URLs of the websites where the credentials were used

Why This Matters

The real danger is not limited to your About.com account. If you reused that same email and password anywhere else, attackers can run credential stuffing attempts against banking sites, email providers, and shopping platforms right now, turning one leaked login into a much bigger problem. Acting quickly to change passwords and remove reused credentials is the single best way to cut this risk off before it spreads.

How Stealer Logs Work

Stealer logs come from infostealer malware that infects a device, often through a pirated download, cracked software, or malicious attachment, and then silently pulls saved passwords, autofill data, and browsing history straight from the browser. The stolen data is then organized, in this case by the website it relates to, and distributed through Telegram channels dedicated to trading stolen credentials. Because the malware captures whatever the browser has saved, these logs can include working, unchanged passwords that criminals can use the moment they get their hands on the file.

Check If You Are Affected

Do not wait to find out if your email or passwords are part of this stealer log. HEROIC's free breach scanner checks your details against a database of more than 400 billion leaked records, including stealer logs like this one, in just a few seconds.