New HQ Part 1 Quietly Leaked 100,275 Login Credentials Online

New HQ Part 1 Quietly Leaks 100,275 Login Credentials

On January 5, 2023, HEROIC analysts identified a stealer log labeled "NEW HQ PART 1," uploaded by a user on a Telegram channel. Marked as the first installment in a series, the file contained 100,275 records, each combining an email address, a plaintext password, and the URL the login was used on.

Why This Is Dangerous

Being labeled "Part 1" suggests this release is the first of a planned series, meaning additional batches from the same source may follow. With over 100,000 plaintext credentials already circulating, attackers can begin testing logins immediately, without needing to break any encryption, and can expect further data to arrive from the same source.

What Was Exposed

• Email addresses
• Plaintext passwords
• URLs tied to each login

Why This Matters

A leak of this size is large enough to power credential stuffing campaigns against banks, email providers, and online retailers. Because the file is described as high quality, or "HQ," it likely underwent some filtering to remove dead or invalid entries, which can make the remaining 100,275 credentials more reliable and therefore more dangerous in the hands of an attacker attempting account takeover.

How Stealer Logs Work

Files like "NEW HQ PART 1" originate from infostealer malware that infects victims' devices and silently copies saved browser logins back to an attacker. The "HQ," or high quality, label suggests the criminal behind this release filtered out low value or non-working entries before packaging the remaining 100,275 records for distribution through Telegram, with further installments likely to follow.

Check If You Are Affected

Because this leak may be the first of several related releases, checking your exposure now is a good idea. HEROIC's free breach scanner searches more than 400 billion leaked records, including staged stealer log releases like this one, to show you if your email address has been compromised. Run a free scan and change any exposed password right away.