LOGS_CENTER 10 Leak Gives Attackers 17,746 Working Login Credentials

HEROIC analysts identified a stealer log dataset titled LOGS_CENTER 10 circulating on a public Telegram channel. Uploaded on July 5, 2023, the file contains 17,746 records, each pairing an email address with a plaintext password and the URL of the account it unlocks.

Why This Is Dangerous

Because the passwords in this log are stored as plaintext rather than hashed, an attacker gains a working login the moment they open the file. There is no cracking, no guessing, and no delay between finding the data and using it. Each record also comes with the exact URL the credential belongs to, so attackers can go straight to the right login page instead of searching for where a stolen password might work.

What Was Exposed in the LOGS_CENTER 10 Leak

• Email addresses
• Plaintext passwords
• URLs of the associated accounts or services

Why This Matters for the 17,746 People Affected

Ready-to-use credentials like these fuel credential stuffing, where attackers automatically test the same email and password combination across many other sites. Anyone in this dataset who reused a password elsewhere faces a real risk of account takeover, identity theft, or financial fraud on accounts that had nothing to do with the original infection.

How This Stealer Log Was Collected

Stealer logs like LOGS_CENTER 10 come from infostealer malware that infects a device, quietly copies saved browser passwords and login URLs, and sends them back to whoever controls the malware. The stolen data is then packaged into a log file and shared or sold through channels like Telegram, where it can circulate for months or years before it draws public attention, as this one did.

Check If You Are Affected

If you want to know whether your email address or passwords appear in this leak or any other, HEROIC's free breach scanner checks your details against a database of more than 400 billion leaked records. Run a scan to see if your credentials are circulating on the dark web.