Dark Web Intel: 23.5M Logins in LeakBase 220M+ ULP Part 1 by FFish

HEROIC Cyber's DarkHive breach intelligence has confirmed that LeakBase 220M+ ULP Part 1 by FFish, a stealer log dump posted on December 27, 2024, exposes 23,541,607 unique compromised credentials. The dataset pairs email addresses with plaintext passwords and the homepage URLs where each login was harvested, making it immediately usable for automated account takeover.

Why This Stealer Log Dump Is Dangerous

Part 1 of the 220M+ ULP release alone contains more unique credentials than the populations of most US states. Because FFish bundled URL, login, and password into a single line per record, criminals receive a ready-to-run attack file. There is no cracking stage, no guessing, just replay on the sites named in the data.

What Was Exposed in LeakBase 220M+ ULP Part 1 by FFish

• 23,541,607 unique records
• Email addresses
• Plaintext passwords
• HomePage URLs for every credential

Why This Matters

Credential dumps of this size typically include working logins for banking, healthcare, workplace, and personal email accounts. Attackers monetize them through account takeover fraud, gift card cash-out schemes, ransomware initial access, and targeted phishing. Even a single match against your reused password can trigger a cascade across other services.

How Stealer Log Database Dumps Work

Infostealer malware such as RedLine, Raccoon, and StealC infects consumer devices and silently exports browser-saved passwords, cookies, and autofill data. Brokers like FFish aggregate the output of many infections, then release multi-part bundles on forums like LeakBase. Each part is downloaded and redistributed within minutes, ensuring the credentials circulate for years.

Check If You Are Affected

HEROIC's identity protection platform scans over 400 billion compromised records, including LeakBase stealer log dumps like this one. Run a free scan to see whether your email, password, or personal data appears in LeakBase 220M+ ULP Part 1 by FFish or any other known breach.