Identity Theft Got Easier: Obsidian Project Leak Put 34,796 at Risk

HEROIC analysts found a stealer log file, labeled Obsidian Project, uploaded to a public Telegram channel on November 8, 2025. The file contained 34,796 records pulled from infected devices, including email addresses, plaintext passwords, and the API host URLs those credentials connect to.

Why This Leak Makes Identity Theft Easier

Identity theft usually requires an attacker to piece together scattered fragments of a person's information. A leak like this one removes that work entirely, handing over a working email and password pair, in plaintext, matched to the exact service it unlocks. That combination is enough to get an attacker into an account without any additional research or effort.

What Was Exposed in the Obsidian Project Log

• Email addresses
• Plaintext passwords
• API host URLs tied to each set of credentials

Why This Matters for the 34,796 Records Involved

Once an attacker is inside one account using a credential from this log, the risk rarely stops there. Password reuse means a single login can unlock email, banking, or social media accounts too, and automated credential stuffing tools make testing those combinations fast and easy. That is how one leaked password can escalate into full identity theft and financial fraud.

How a Stealer Log Like Obsidian Project Gets Built

Stealer logs come from infostealer malware that infects a device, typically through a phishing email or a malicious download, and then quietly copies saved browser passwords, autofill data, and the sites they belong to. The malware bundles everything into a log file and sends it back to the operator running it. In this case, that operator uploaded the finished log directly to a Telegram channel, giving anyone in that channel immediate access to all 34,796 records.

Check If You Are One of the 34,796 Affected

The easiest way to stop identity theft before it starts is to know your exposure early. HEROIC's free breach scanner checks your email against a database of more than 400 billion leaked records, including stealer logs like Obsidian Project, so you can find out right away if a password needs to change.