Bigger Than a Small City: 121,424 Leaked in Canada Dump SIXBOI

On January 22, 2025, a file labeled "121434 Canada Dump SIXBOI" appeared on a Telegram channel that trades in stolen login data. Despite the number in its name, the file actually contains 121,424 individual records pulled from malware-infected devices. Each record includes an email address, a plaintext password, and the URL of the site where that password was used.

A Leak the Size of a Small City

121,424 exposed logins is a large number to picture. It's roughly the population of a small American city, all sitting in a single downloadable file that anyone with a Telegram account can access. That scale is exactly why stealer logs like this one are traded so widely: a single file gives criminals thousands of working usernames and passwords to test in one sitting.

What Was Inside the Canada Dump SIXBOI File

• Email addresses linked to online accounts
• Plaintext passwords with no encryption protecting them
• URLs identifying which sites and services each password belongs to

Why This Matters (Even If You're Not in Canada)

The file's name references Canada, but stealer logs like this one are compiled from whichever devices happened to be infected, regardless of the victim's location. If your email and password appear in the file, criminals can use them for credential stuffing, trying the same login combination across banking, email, and shopping sites, because so many people reuse the same password everywhere. That single reused password is often all it takes for account takeover, identity theft, or direct financial fraud.

How a Dump Like This Gets Built

Files like Canada Dump SIXBOI start with infostealer malware quietly running on a victim's computer, copying every saved password, autofill entry, and login session it can find. The stolen data from hundreds or thousands of infected devices is then merged into one large file and uploaded to Telegram, often labeled with the uploader's own naming convention rather than any real company or breach event. This is not a breach of a single organization's systems. It is a collection of individually infected users' data.

Find Out If You Were One of the 121,424

With more than 121,000 records in this file alone, the odds that at least one of them belongs to someone you know are high. HEROIC's free breach scanner checks your email against a database of over 400 billion leaked records, including stealer logs like Canada Dump SIXBOI, and shows you instantly if you're affected. If your information turns up, change that password immediately everywhere you've reused it and enable two-factor authentication.