Dark Web Intel: i.softbank.jp Leak Exposes 4,969 Records

HEROIC's dark web intelligence team identified a stealer log dump tied to "i.softbank.jp," uploaded to a Telegram channel on 18-Jun-2026. The file contained 4,969 records, including email addresses, plaintext passwords, and the URLs of the sites where those logins were used.

Why This Dark Web Find Involving i.softbank.jp Is Dangerous

HEROIC's analysts monitor the same Telegram channels and dark web marketplaces where criminals trade freshly harvested credentials, and this log surfaced there in plaintext form. Because each password is tied to the exact site it was captured on, including logins associated with the i.softbank.jp mail service, anyone who obtains this file can attempt to log directly into the accounts it lists.

What Was Exposed

• Email addresses
• Plaintext passwords
• URLs of the websites tied to each login

Why This Matters

Because the passwords are unencrypted and mapped to specific sites, this data enables immediate account takeover on any service where the credentials remain valid. If any of these passwords were reused across other accounts, attackers can also attempt credential stuffing to break into email, banking, or shopping profiles tied to the same login.

How Stealer Logs Work

Stealer log malware infects a device, often through cracked software or a malicious attachment, and silently records saved passwords, autofill entries, and browser session data as they are typed. The results are bundled into a log file and posted to Telegram channels or dark web forums, where analysts like HEROIC's team track them alongside the criminal buyers looking to use them.

Check If You Are Affected

If you use an i.softbank.jp address or any similar webmail account, use HEROIC's free breach scanner to check whether your credentials appear in this or any other leak. It searches a database of more than 400 billion breached and leaked records to show you instantly if your information has been exposed.