Logs_29 June Leak: 105,018 Passwords Exposed Across the Web

HEROIC analysts uncovered a large stealer log named "Logs_29 June" that a Telegram user uploaded on June 30, 2026. The file contains an unusually high 105,018 records, each pairing an email address with a plaintext password and the exact login URL the credential opens. Unlike smaller, single site dumps, a file this size usually pulls from dozens of infected devices at once, sweeping up accounts across banking, retail, streaming, and social platforms all in a single batch.

Why the Scale of the Logs_29 June Dump Is So Concerning

With over 105,000 working logins in one file, this is not a narrow, targeted leak, it is a broad sweep across whatever accounts happened to be saved in infected browsers. That breadth is what makes it dangerous, the file likely touches shoppers, bank customers, healthcare portals, and workplace tools all at once, giving attackers a huge and varied pool of credentials to test against other services.

What Was Exposed in the Logs_29 June Dump

• Email addresses tied to 105,018 individual accounts
• Plaintext passwords stored with no encryption
• The exact login URLs each credential works on, spanning many different sites

Why This Matters: A Massive Pool for Credential Stuffing

A dump this large gives attackers enough volume to run automated credential stuffing campaigns across banking, retail, and email platforms at scale, hoping that even a small percentage of the 105,018 accounts reuse the same password elsewhere. Even a low sucess rate on a file this size can still hand criminals thousands of working accounts, opening the door to identity theft, fraudulent purchases, and drained bank accounts.

How a Stealer Log This Large Gets Assembled

Infostealer malware spreads through fake downloads, cracked software, and malicious email attachments, infecting devices one at a time before quietly harvesting every saved password and login URL from the browser. To reach a total of 105,018 records, the operator behind Logs_29 June likely combined output from many seperate infected machines over several days before compiling it into one large file and uploading it to Telegram.

Check If You Are Affected by the Logs_29 June Leak

With more than 105,000 accounts in this single file, it is definately worth checking your own exposure right away. HEROIC's free breach scanner searches a database of more than 400 billion leaked records, so you can check your exposure in seconds and change any passwords before an attacker gets there first.