Private Links Leak Hits 22,334 Users’ Emails and Passwords
On 17-Jul-2026, HEROIC analysts identified a stealer log titled "Private Links AllLinksPrivate" shared on Telegram. The file exposed 22,334 records, each combining an email address, a plaintext password, and the URL of the site that login belongs to.
Who the Private Links Leak Puts at Risk
Stealer logs like this one do not target a single company, industry, or type of person. Anyone whose device became infected, regardless of who they are or what accounts they hold, ends up in a file like this. With 22,334 records, this leak likely spans a wide mix of everyday accounts including email, shopping, and social media logins.
What the Private Links File Contains
- Email addresses
- Plaintext passwords
- URLs of the sites each login was used on
Why This Matters
Because the data was pulled directly from infected devices, every password is stored in plaintext and ready to use. Anyone among the 22,334 affected records who reused a password on more than one account faces a real risk of credential stuffing and account takeover.
How a Leak This Size Comes Together
A file exposing over 22,000 records typically results from malware spreading widely, often through fake downloads or malicious links shared across many devices before the collected data is compiled into one release. The name "AllLinksPrivate" suggests this file aggregates data tied to a broad set of private links and accounts.
Check If You Are Affected
No matter who you are, if you have ever saved a password in your browser, it is worth checking your exposure. HEROIC's free breach scanner searches more than 400 billion leaked records to see if your email or password appears in Private Links or any other breach.
Breach Breakdown
22,334 passwords exposed. Is yours one of them?
Enter your email to scan this breach plus 400B+ other leaked records. If you're compromised, we'll show you exactly where and what to change.
Free forever · No account required · Results in seconds
/img/qr-code.png)