HUNTER_ULP Private Base Leak: Exactly 5,398,339 Records Found

Not 5 million, not an estimate, exactly 5,398,339. That is the precise record count inside a file called "HUNTER_ULP PRIVATE NEW BASE 01-11-2025_0014," uploaded to Telegram on 01-Nov-2025. Odd, specific numbers like this tend to show up when the data comes straight from an automated scraping or malware collection process rather than a rough guess, and it puts this leak firmly in mega-breach territory.

Why This Is Dangerous

The word "private" in the file name usually signals that the uploader considers this a premium product, meaning it may not have been shared as widely, or as many times, as free public leaks. That can actually make it more dangerous, since fewer defenders and researchers may have seen it before it starts getting used for fraud. A base this size also gives attackers enough volume to automate large-scale credential stuffing campaigns across countless websites.

What Was Exposed

• 5,398,339 total records
• Email Addresses
• Plaintext Passwords
• URLs associated with each account

Why This Matters

At over 5 million records, this leak isnt a niche event, its the kind of dataset that touches an enormous number of ordinary internet users. Because the passwords are stored in plaintext, anyone who obtains the file can imediately begin testing logins against banks, email providers, and shopping sites without needing any special skills. The sheer scale also means the leak will likely get broken up, resold, and recirculated many times over the coming months.

How Stealer Logs Work

A base of this magnitude is typically built up over a long period, with infostealer malware infecting device after device and quietly funneling saved browser credentials back to whoever runs the operation. Once enough logs accumulate, they get merged, cleaned, and packaged into a single "base" file, wich is then sold privately or, eventually, leaked more widely as this one apparently was.

Check If You Are Affected

With millions of records in circulation, the odds that your information is somewhere in a leak like this are higher than most people realize. HEROIC's free breach scanner searches more than 400 billion exposed records, so you can check your email and passwords quickly and find out for certain instead of just hoping for the best.