EclipseLogs Stealer Log Quietly Surfaced: 7,142 Passwords Exposed

The EclipseLogs Stealer Log Quietly Put 7,142 Passwords on the Dark Web

HEROIC analysts identified a stealer log file, named EclipseLogs, uploaded to a public Telegram channel on June 15, 2025. There was no press release, no data breach notification, and no company statement, just a file appearing quietly in a channel used to trade harvested credentials. Inside were 7,142 records, each pairing an email address with a plaintext password and the URL of the login page that password belongs to.

Why This Is Dangerous

Because the passwords sit in plaintext, there's no cracking required. Anyone who grabs the EclipseLogs file can read a working email and password combination straight off the page and start trying it against other accounts within minutes. The included URLs make it even easier, telling an attacker exactly which site each credential was captured from, so they know precisely where to start.

What Was Exposed in EclipseLogs

• Email addresses
• Plaintext passwords
• URLs identifying the compromised login

Why This Matters

A quiet leak is not a small leak. Each of the 7,142 accounts in EclipseLogs is now exposed to credential stuffing, where attackers automatically test the same email and password pair across banking sites, email providers, and social platforms. If any of those 7,142 people reused a password, one stolen login can turn into several compromised accounts, opening the door to identity theft and financial fraud.

How a Stealer Log Like EclipseLogs Gets Made

Stealer logs come from information-stealing malware that infects a device, often through a pirated download, a fake software crack, or a malicious attachment. Once running, the malware reads saved passwords straight out of the browser's storage, notes which website each one belongs to, and quietly sends the results back to the person operating the malware. That operator compiles the harvested data from many infected machines into a single file, like this 7,142-record EclipseLogs dump, and shares it on Telegram.

Check If You Are Affected

If you're not sure whether your email turned up in the EclipseLogs dump or another stealer log, HEROIC's free breach scanner can tell you in seconds. It checks your email against a database of more than 400 billion leaked records and flags every known exposure, so you know exactly which passwords need to change.