The Blendr.Badoo.com Leak Tops 18,265 Stolen Passwords and Emails

HEROIC analysts found a stealer log tied to blendr.badoo.com that a Telegram user uploaded on 10 June 2026. The file contained 18,265 records, one of the larger stealer logs to surface recently, each pairing an email address with a plaintext password and the URL of the login page that password was used on.

Why This Is Dangerous

This exposure did not come from a breach of blendr.badoo.com's own systems. It came from infostealer malware running on infected devices, quietly recording passwords as people logged in. Because the passwords in this file are stored in plaintext, an attacker can read all 18,265 of them the instant the file is opened, with no cracking required. The URL tied to each record tells an attacker exactly which login page a stolen password belongs to.

What Was Exposed

• Email addresses
• Plaintext passwords
• URLs tied to each set of stolen credentials

Why This Matters

Dating app accounts often hold sensitive personal details, and a leak of this size gives attackers 18,265 chances to find a reused password. Criminals run stolen credentials against email, banking, and other accounts through credential stuffing, hoping to find a match. A successful match leads to account takeover, which can quickly escalate into identity theft or financial fraud.

How Stealer Logs Work

Infostealer malware infects a device through a malicious download, phishing link, or infected attachment, then silently copies saved passwords, autofill entries, and session cookies from the browser. That stolen data is packaged into a log file and sent back to the attacker, often within hours of infection. Logs like this one are then sold or freely shared on Telegram, which is exactly how this blendr.badoo.com related file ended up circulating.

Check If You Are Affected

If you have ever used blendr.badoo.com or reuse passwords across your accounts, it is worth checking whether your information appears in this exposure. HEROIC's free breach scanner searches more than 400 billion leaked records so you can confirm your exposure and change any affected password right away.