ATM_LOGS 173: 5,291 U.S. Stealer Log Credentials (Sep 2023)

ATM_LOGS 173: A 173-File Stealer Log Bundle From September 2023

ATM_LOGS 173 log is a bundle of 173 individual stealer log files that were postad to Telegram by an anonymos user in September 2023. The bundle exposed 5,291 U.S. infostealer credentials -- email addresses, plaintext passwords, and the target URLs where those credentials are used. The "ATM_LOGS" label likely refers to the Telegram channel name rather than ATM machine data specifically; the actual records follow the standard infostealer log format of browser-captured credentials from infectd consumer devices.

ATM_LOGS 173: Breach Summary

• Records Exposed: 5,291
• Data Types: Email addresses, plaintext passwords, target login URLs
• Breach Type: Infostealer malware log (bundled release)
• Country Affected: United States
• Date Leaked: September 25, 2023

173 Logs, 5,291 Records: Understanding the Math

With 173 individual log files producing 5,291 total records, the average yield per log is about 30 credentials. This is consistent with typical consumer device stealer log output, where a single infected machine might have 20-50 saved passwords across browsers, email clients, and other applications. Each of those individual logs represents one compromised device -- one person's digital life captured and packaged for distribution on Telegram.

The September 2023 Telegram Infostealer Landscape

September 2023 was an active period for Telegram-based infostealer activity. Multiple bundles from different operators -- including CRYPTON_LOGS and Fire Cloud Free -- were uploaded on or around September 25, 2023. This clustering suggests possible coordination, bulk uploads to the same channel, or simply a peak period of activity driven by demand from credential buyers. The ATM_LOGS 173 release is one of several bundles from that period that exposed U.S. credentials to Telegram's criminal audience.

Check If Your Credentials Were Exposed

HEROIC's free breach scanner searches across more than 400 billion exposed records -- including stealer log bundles like ATM_LOGS 173 from September 2023. Find out if your email appeared in this release. Run a free scan at HEROIC.com.