HEROIC Uncovers 11,229 Leaked davidduke.com Emails and Passwords

HEROIC Uncovers 11,229 Leaked davidduke.com Emails and Passwords

HEROIC analysts observed a stealer log, uploaded to Telegram on June 10, 2026, that contained 11,229 records tied to davidduke.com. Each record paired an email address with a plaintext password and the URL where that credential had been used to log in.

Why Analysts Flagged This davidduke.com Leak as Dangerous

What stood out to HEROIC's team was how immediately usable the data is. The passwords sit in plaintext, already matched to an email address and the exact site they unlock, meaning any attacker who finds the file can start attempting logins right away.

What Was Exposed

• Email addresses
• Plaintext passwords
• URLs of the sites where the credentials were used

Why This Matters

Analysts note that with over 11,000 records involved, the leak provides ample material for credential stuffing attacks. Anyone who reused their davidduke.com password elsewhere is at risk of account takeover, identity theft, or financial fraud.

How Analysts Traced This Stealer Log's Origins

HEROIC's research points to infostealer malware as the source, malicious code that infects a device through cracked software or fake downloads and silently copies saved browser passwords and autofill data. The stolen information is packaged into a log file and distributed on Telegram, which is how analysts came across this davidduke.com data.

Check If You Are Affected

Just as HEROIC's analysts identified this leak, you can identify your own exposure. Run a free scan against HEROIC's database of more than 400 billion leaked records to see if your davidduke.com credentials have appeared.