Monster Cloud Free 36 Stealer Log: 23,030 US Credentials Exposed October 2023

Monster Cloud Free 36: The Largest Confirmed October 7 Batch

As Monster Cloud's October 7, 2023 release catalog expands with each confirmed batch, Free 36 has emerged at the top: 23,030 records, the largest confirmed single Monster Cloud batch from that date. It eclipses Free 37 (21,888), which held the previous top spot, by 1,142 records. That Free 36 and Free 37 are numerically adjacent -- separated by a single batch number -- while both sitting in the large-tier group suggests that back-to-back batch numbers can draw from related but distinct source pools. Free 36 and Free 37 together contribute 44,918 records -- more than a fifth of Monster Cloud's confirmed October 7 total of 207,409 across 13 batches.

Monster Cloud Free 36 (October 2023): Stealer Log Summary

• Records Exposed: 23,030
• Data Types: Email addresses, plaintext passwords, URLs
• Breach Type: Stealer log -- credentials harvested from malware-infected endpoints, not a direct database breach
• Password Type: Plaintext -- captured directly from browser sessions and credential stores by infostealer malware
• Country: United States
• Date Leaked: October 7, 2023

23,030 Records and the Large-Tier Group Structure

Monster Cloud's large-tier October 7 batches (all above 19,000 records): Free 36 (23,030), Free 37 (21,888), Free 42 (21,684), Free 70 (20,917), Free 50 (20,156), Free 46 (19,424). Six batches, all within a 3,606-record range of each other. Free 36's 23,030 sits at the top of this group -- the only confirmed batch above 23,000 records. The cohesion of the large-tier group suggests these six batches share infrastructure: similar malware delivery methods, similar targeted endpoint types, or similar regional targeting within the United States. The tight clustering implies Monster Cloud's largest batches weren't random -- they were consistent output from a well-controlled infection system that reliably produced 19,000-23,000 records per run.

13 Batches, 207,409 Records: October 7's Full Monster Cloud Picture

With Free 36's 23,030 included, the 13 confirmed October 7 Monster Cloud batches total 207,409 records -- more than twice October 8's confirmed output of 94,014. This cements October 7 as Monster Cloud's peak day by a wide margin. The three-day confirmed total (October 7, 8, and 9) stands at 313,171 records across 23 verified batches. Batch numbers between the confirmed releases suggest substantial additional volume: Free 38, 39, 40, 43, 45, 47, 48, 49 are all October 7-era batches not yet confirmed, each potentially adding 6,000-23,000 records to the running total. The full Monster Cloud catalog estimate of 350,000 to 1,000,000 US credentials remains in play.

Free 36 and the Batch Number Mystery: Adjacent to the Beginning

Monster Cloud's confirmed October 7 batches span numbers 36 through 70. Free 36 is the lowest-numbered confirmed October 7 batch, sitting just a few numbers above the highest confirmed October 8-9 batch range. If the series is sequentially numbered, Free 36 through Free 70 would all post-date Free 1-9 -- yet they appear on the earlier calendar date of October 7. The retroactive or multi-track numbering hypothesis gains support here: Free 36 may have been assigned its number well after Free 1-9 were cataloged, reflecting a different data source, a different collection campaign, or a separate leg of Monster Cloud's operation that was logged independently from the October 8-9 releases.

Check If Your Data Was Exposed

HEROIC's free breach scanner searches across more than 400 billion exposed records -- including Monster Cloud stealer log batches like Free 36 -- to identify whether your credentials have been compromised. Run a scan at HEROIC's breach scanner today and find out if your accounts are at risk.