Inside the LeakBase 14Kk ULP: How 4,007,838 Logins Were Stolen

HEROIC found the LeakBase 14Kk ULP by GandalFF stealer log dated February 9, 2024, exposing 4,007,838 records including email addresses, plaintext passwords, and last names harvested by infostealer malware.

Why the LeakBase 14Kk ULP Breach Is Dangerous

With 4 million plaintext passwords tied to email addresses, attackers can immediately attempt credential stuffing across hundreds of platforms. Last names included in this log make phishing and social engineering attacks more convincing, increasing the chance victims are deceived into surrendering additional account access.

What Was Exposed in the LeakBase 14Kk ULP Leak

• Email Address
• Plaintext Password
• Last Name

Why This LeakBase 14Kk ULP Data Puts You at Risk

Plaintext passwords give attackers direct access to every account where you reused the same credentials. Combining email addresses with last names enables targeted phishing campaigns that appear legitimate. Victims face unauthorized account access, financial fraud, and identity theft across every platform linked to their exposed email.

How Stealer Logs Work

Stealer logs are created when infostealer malware infects a victim's device, silently extracting saved passwords from browsers, session cookies, and lists of visited websites. The malware transmits this data to criminal servers, where it is compiled into logs and sold or shared on underground forums. Unlike database breaches, stealer logs target individual devices and capture real-time, actively used credentials.

Check If Your Data Was Exposed

HEROIC operates one of the world's largest breach databases, covering more than 400 billion leaked records. Use HEROIC's free breach scanner to check if your email address or credentials appeared in the LeakBase 14Kk ULP by GandalFF leak or thousands of other breaches in our database.