Corps 29.08 Stealer Log: 73,949 Passwords Leaked Online

In January 2023, HEROIC analysts identified a stealer log titled "Corps 29.08" uploaded to Telegram by an anonymous user. The file contained 73,949 records, including email addresses, plaintext passwords, and the URLs of the websites those logins were used on. The name "Corps" suggests the seller grouped this batch around corporate or business-related accounts, adding an extra layer of concern to an already large leak.

Why This Corps 29.08 Leak Is Dangerous

Almost 74,000 credentials in one file is a serious amount of exposure. Because each record includes a plaintext password already matched to the exact login page it belongs to, an attacker doesn't need to crack anything, they can attempt to sign in immediately using the information as-is.

What Was Exposed

• Email addresses
• Plaintext passwords
• URLs of the associated login sites

Why This Matters

With this many credentials exposed at once, the risk extends well beyond any single account. Attackers frequently run large plaintext credential sets like this through automated tools in a technique called credential stuffing, testing each email and password combination against banking sites, email providers, and other online services until one grants access.

How Stealer Logs Work

Stealer logs are created by malware that infects a device and silently harvests whatever login details are saved in the browser: usernames, passwords, and the websites they belong to. That data is then bundled into a file and sent to the attacker, who often labels and organizes it by theme, as with this "Corps" batch, before circulating it on Telegram.

Check If You Are Affected

With nearly 74,000 records in this leak, it's worth taking a moment to check your own exposure. HEROIC's free breach scanner checks your email against more than 400 billion leaked records, including stealer logs like this one, so you can find out instantly and update any passwords you may have reused.