4,117 primus.ca Passwords Leaked Online After Breach

What HEROIC Analysts Found

In June 2026, HEROIC analysts found a stealer log posted to Telegram containing 4,117 records tied to primus.ca, a Canadian telecom domain. The log included email addresses, plaintext passwords, and the login URLs those credentials open. That's 4,117 separate sets of working login details, harvested from infected devices and packaged into a single file for anyone to download.

Why This Is Dangerous

An email address alone isn't much use to an attacker, and a password alone isn't either, unless you know what it unlocks. This log removes all the guesswork by pairing each password with the login URL it belongs to, meaning an attacker can go straight into the account without cracking or phishing anything.

What Was Exposed

• Email addresses
• Plaintext (unencrypted) passwords
• Login URLs tied to each set of credentials

Why This Matters

Because these passwords are stored in plaintext, they can be used immediately. Anyone who reused a primus.ca password elsewhere is exposed to credential stuffing, where the same login is tested automatically across banking, email, and shopping sites. A compromised email can also be used to intercept password resets for other accounts, turning one leaked credential into a broader account takeover.

How a Stealer Log Like This Gets Made

This data comes from infostealer malware, malicious software that infects a device, often through a fake download or cracked application, and quietly harvests saved browser passwords, autofill data, and active sessions. The results are compiled into a log and posted to Telegram, where they get merged with other logs into larger searchable collections used to look up specific domains like primus.ca.

Check If You Are Affected

If you have a primus.ca account, it's worth checking whether your credentials are part of this leak of 4,117 records. HEROIC's free breach scanner checks your email against a database of more than 400 billion exposed records, including stealer logs like this one, so you can find out in seconds.