One Stealer Log. 99,840 Records. The UHQ MIX PART 4 1115 Credentials.

HEROIC analysts identified this stealer log on 29-Jan-2023. The breach exposed 99,840 records, with stolen data including email addresses, plaintext passwords, and URLs. The source is identified as UHQ MIX PART 4 1115 uploaded by a Telegram User.

Why This Is Dangerous

With nearly 100,000 stolen email and password pairs all in plaintext, this dataset is immediately usable by anyone who downloads it. There is no encryption to bypass and no cracking required. The included URLs identify exactly which services were targeted, giving attackers a prioritized list of high-value accounts to attempt to access including email providers, financial platforms, and social media sites.

What Was Exposed

• Email Addresses
• Plaintext Passwords
• URLs

Why This Matters

A dataset of this size is routinely used in credential stuffing attacks, where automated tools test every stolen username and password combination across dozens of platforms simultaneously. Victims who reuse passwords across accounts are at the highest risk. These attacks contribute directly to account takeovers, identity theft, unauthorized financial transactions, and fraud.

How Stealer Logs Work

Stealer logs are generated by malware that silently infects a victim's computer. Once active, the malware captures every login credential typed into a browser, pulls passwords saved on the device, and records the URLs of websites visited. The resulting files are bundled into datasets and distributed through private Telegram channels and dark web marketplaces, often freely shared or sold to other criminals.

Check If You Are Affected

HEROIC offers a free breach scanner that searches 400 billion records from known breaches. Search your email address now to find out if your credentials appear in this breach or others. The scan is free and takes seconds.