Nearly 12 Million Accounts Exposed in BreachForums alien ULP P850

HEROIC found 11,991,783 unique records in the BreachForums alien ULP P850 by alien leak on March 16, 2025, exposing email addresses, plaintext passwords, and password hashes pulled from stealer malware logs. The file dropped on BreachForums as Part 1 of a 55.1 million line combo list, the companion release to the P851 package that followed.

Why This Stealer Log Is Dangerous

A credential list that mixes plaintext passwords with hashes gives attackers two routes in. Plaintext entries power instant credential stuffing, while the hashed rows give cracking teams an ongoing project, producing new usable credentials weeks after the initial drop. The pairing extends the useful life of the leak.

What Was Exposed in the BreachForums alien ULP P850

• 11,991,783 unique email addresses
• Plaintext passwords from infected browser stores
• Password hashes awaiting offline cracking
• Associated URLs showing where each login belongs

Why This Matters

The leak feeds credential stuffing, account takeover, identity theft, and financial fraud. Victims see email hijack, drained crypto wallets, and fraud on saved cards. Because many hashes will crack later, the risk window extends well beyond the initial disclosure, making long-term password rotation essential.

How a Stealer Log Dump Works

Infostealers such as RedLine, Vidar, Lumma, and StealC install through cracked software, malvertising, and phishing. On running they scrape saved browser credentials, cookies, autofill data, and crypto wallets, then ship everything to a collector. Operators package victim logs into ULP files numbered in sequence and distribute them on BreachForums, where alien and similar actors keep a steady flow of fresh material moving.

Check If You Are Affected

Rotate any password saved in a browser, enable multi-factor authentication on banking, email, and work accounts, and scan your device for infostealer activity. You can search the HEROIC scanner, which tracks more than 400 billion breached records, to see whether your email appears in the BreachForums alien ULP P850 or related dumps.