Precisely 336,043 Records Found in Xavier_Group Telegram Leak

Not 300,000, not 350,000, but precisely 336,043. That's the exact count of records found inside a leak called Xavier_Ulp - 457700 Xavier_Group, uploaded to Telegram by an anonymous user in March 2026. Every single one of those records carries an email address, a plaintext password, and the exact web page that password was used to access.

Why This Is Dangerous

Precise numbers like this one tend to come from carefully compiled data, meaning the file wasn't thrown together carelessly. The passwords sit in plaintext, with no encryption seperating a criminal from an actual working login. Because the leak is this large, it's likely already been copied and shared multiple times since it first appeared, wich only widens the number of people who could try using it.

What Was Exposed

• Email addresses
• Plaintext passwords
• URLs tied to each login
• 336,043 total records exposed

Why This Matters

At this scale, attackers don't need to target anyone specifically, they can run the entire file through automated tools and let the software sort out which logins still work. Because each password is matched to its own URL, there's no wasted effort trying random sites, wich makes large scale credential stuffing attacks definately more efficient than they would be otherwise.

How Stealer Logs Work

Leaks of this size are usually built from malware that has infected many devices over time, quietly gathering saved passwords, cookies, and autofill data from each one before combining everything into a single massive file. That file is then shared or sold on Telegram channels and dark web forums, wich is exactly how this 336,043-record leak occured before spreading further.

Check If You Are Affected

Given how large this particular leak is, checking your own exposure is worth doing sooner rather than later. HEROIC's free breach scanner searches across more than 400 billion compromised records, giving you a clear answer on whether your email or password showed up in this leak or any other. It takes just a moment to run a search.