The Canada Random 10000 Leak: 9,951 Emails and Passwords

HEROIC analysts identified this stealer log on April 3, 2026. The breach exposed 9,951 records, with stolen data including email addresses, plaintext passwords, and URLs. The source is identified as Canada _random_10000.

Why This Is Dangerous

This stealer log targets Canadian internet users, capturing plaintext passwords alongside email addresses and the specific websites where credentials were stolen. With the passwords in readable form, attackers can directly access affected accounts without needing to crack any encryption.

What Was Exposed

• Email addresses
• Plaintext passwords
• URLs (website addresses where credentials were stolen)

Why This Matters

The 9,951 Canadian credentials in this breach are targets for account takeover fraud. Criminals test stolen credentials against banking portals, government services, and email providers. Canadian victims who reuse passwords across platforms may find multiple accounts compromised from a single stolen credential. Personal data accessible through these accounts can also be used for identity theft.

How Stealer Logs Work

Stealer logs are created when malware secretly runs on a victim's computer. The malware captures login credentials from browser password managers and keystrokes during login sessions. This harvested data is compiled into files and distributed through private Telegram channels and dark web forums, where other criminals can download and exploit them.

Check If You Are Affected

HEROIC offers a free breach scanner that searches 400 billion records. Search your email address now to see if your credentials appear here or elsewhere. Free, takes seconds.