BREAKING: LOGS CENTER NEW Exposes 64,218 Records in Stealer Log Incident

In November 2025, a Telegram user uploaded a stealer log labeled "11.3 - LOGS_CENTER_NEW," exposing 64,218 records pulled from infected devices. Each record pairs an email address with a plaintext password and a service URL, giving anyone who obtained the file a large, ready-to-use set of working logins.

Why This Is Dangerous

At more than 64,000 records, this is one of the larger stealer logs HEROIC has reviewed recently. Because the passwords were never hashed or encrypted, there is no cracking step standing between the data and account access. Automated credential-stuffing tools can run through a file this size in a short amount of time, testing every email and password pair against major platforms and using the paired URL to know exactly where to try each one.

What Was Exposed

• Email addresses
• Plaintext passwords
• Associated service URLs

Why This Matters

A log of this size does not stay in one place for long. Once shared on Telegram, files like this one are typically copied, repackaged, and merged into other combo lists that keep circulating on forums for months. For the 64,218 people whose data appears here, the risk is ongoing rather than a single event, especially for anyone who reused a password across more than one account.

How Stealer Log Breaches Work

Infostealer malware infects a device through phishing emails, cracked software, or fake browser extensions, then quietly collects saved browser passwords and the web addresses tied to them. The stolen data is compiled into a log file and shared or sold on Telegram and similar channels. The "LOGS_CENTER_NEW" name in this file suggests it was organized as a fresh batch pulled together from many separate infections rather than a single source.

Check If You Are Affected

You can check whether your email address appears in this or any other known leak with a free scan at heroic.com. HEROIC's breach scanner checks against a database of more than 400 billion exposed records. If you find a match, change that password immediately and anywhere else you may have reused it.