Your Password Might Be In the 22.5M TXTLOG_ALIEN 114M ULP Leak

HEROIC discovered 22,483,689 records in BreachForums TXTLOG_ALIEN 114M ULP by txtlog_alien on January 13, 2025, leaking email addresses, homepage URLs, and plaintext passwords pulled from a 114 million line aggregated stealer log posted to BreachForums.

Why This Stealer Log Dump Is Dangerous for You

If you reused a password across services, this is the kind of dump that burns you. The 114M ULP aggregates credentials from thousands of infected machines, and with 22.5 million unique emails in plaintext, attackers can match your login to banking, SaaS, and social accounts within minutes of pulling the file.

What Was Exposed in BreachForums TXTLOG_ALIEN 114M ULP by txtlog_alien

• 22.5 million unique email addresses deduplicated from 114M log lines
• Plaintext passwords, usable with no cracking required
• HomePage URLs mapping each credential to its source service

Why This Matters

This is one of the largest combo-list aggregations of the year, and it is sitting on a public hacking forum. Every password reuse across email, banking, crypto, and work VPNs becomes a direct compromise vector once your email lands in this file.

How Aggregated Stealer Log Dumps Work

Operators like txtlog_alien collect logs from multiple infostealer families, deduplicate them, and sell or post aggregated combo lists on BreachForums. Subscribers download the data, run it through credential checkers, and sell validated hits to targeted-attack crews within a day of the release.

Check If You Are Affected

HEROIC scans more than 400 billion compromised records across the surface, deep, and dark web. Run your email through the HEROIC exposure scanner to see if your credentials surfaced in BreachForums TXTLOG_ALIEN 114M ULP by txtlog_alien, then rotate every password the checker flags.