Breach Intelligence Report 26 Sep 2025

QLogs 1000 PCS Jun 23, 2025: 53,173 US Records Released Without the VIP Label

HEROIC
HEROIC Threat Intelligence Team
Email Addresses Plaintext Password Urls
Your email may be in this breach. Check in 5 seconds — free, no signup required.
Scan Email →
Records Exposed 53,173
Source Type Stealer log
Origin Telegram
Password Type plaintext

No VIP, High Yield: QLogs 1000 PCS Jun 23 Releases 53,173 US Records Without the Premium Label

A yield of approximately 53.17 records per file should easily clear QLogs' apparent VIP threshold -- yet the batch "QLogs 1000 PCS 23-06-2025" was released on June 23, 2025 without the VIP prefix. At 53,173 US credentials across 1,000 stealer log files, this is one of the higher-volume same-day PCS releases in the series, and its per-file output materially outperforms several batches that did receive the VIP designation. The missing label is not an isolated anomaly: the June 21 (300 PCS) and June 22 (500 PCS) same-day releases also lack VIP designation, suggesting a consistent early-series pattern rather than a one-off omission.


QLogs 1000 PCS (June 23, 2025): Stealer Log Summary

  • Records Exposed: 53,173
  • Data Types: Email addresses, plaintext passwords, URLs
  • Breach Type: Stealer log -- credentials harvested from malware-infected endpoints, not a direct database breach
  • Password Type: Plaintext -- captured directly from browser sessions and credential stores by infostealer malware
  • Country: United States
  • Date Leaked: June 23, 2025

The Early Series Pattern: VIP Label Not Yet Established

The three earliest same-day PCS releases in the observed QLogs dataset -- Jun 21 (300 PCS, ~50.6 rec/file), Jun 22 (500 PCS, ~44.8 rec/file), and Jun 23 (1000 PCS, ~53.2 rec/file) -- all lack the VIP designaton. From Jun 26 onwards, VIP is consistently applied to qualifying PCS batches. This timeline strongly suggests the operator introduced the VIP label as a tier designation starting around Jun 26, establishing a naming convention rather than having always used one. The Jun 21-23 batches predate the VIP framework and were released under what appears to be a pre-tier naming convention. The fact that their yields are high enough to qualify retroactively confirms the issue is chronological, not qualitative.


Jun 23: Two Batches, One Collection Date

Both this batch (QLogs 1000 PCS 23-06-2025, leaked same-day Jun 23) and the later QLogs VIP 1143 PCS 23-06-2025 (leaked Jun 29) carry the same "23-06-2025" date in their name. Two batches sharing a collection date but releasing six days apart suggests the operator split the Jun 23 harvest across two distribution channels: same-day release for the bulk 1,000-file package through the non-VIP PCS pipeline, and a six-day-staged release of a curated 1,143-file subset through the emerging VIP PCS channel. The havested pool was large enough to source two batches, with the VIP-labeled release benefiting from additional staging time despite a lower raw yield than the same-day package.


Check If Your Data Was Exposed

HEROIC's free breach scanner searches across more than 400 billion exposed records to tell you whether your email address or password has appeared in stealer log releases like this one. The 53,173 records in this batch carry plaintext passwords ready for immediate credential stuffing deployment -- no cracking required. Search your email at HEROIC's breach scanner and update any matched passwords before they're used against your accounts.

Breach Breakdown

Domain N/A
Leaked Data Email Addresses,Plaintext Password,URLs
Password Types plaintext
Date Leaked 26 Sep 2025
Check in 5 seconds

53,173 passwords exposed. Is yours one of them?

Enter your email to scan this breach plus 400B+ other leaked records. If you're compromised, we'll show you exactly where and what to change.

All information submitted is Private and Secure. We do not sell or share email addresses. By searching, you agree to HEROIC's Privacy Policy and Terms of Service.

Free forever · No account required · Results in seconds

Private & Secure No Account Needed 2,805 scanned today
Breach Rank #N/A by affected users
Impact Score
2
sensitivity + scale + recency
Est. Financial Impact $384.8K fraud, phishing & misuse risk
Scan your email Free →
Scan to sign up

Scan to sign up instantly

24/7 Dark Web Monitoring
Instant Breach Alerts
Secure Data Protection
Your Data is at Risk

Your Personal Information is Exposed

We found your data exposed in multiple breaches. This includes:

  • Email addresses
  • Passwords
  • Phone numbers
  • Financial information
Secure My Information Now

Your information is protected by enterprise-grade security

Your Breach Details

Date:
Severity:
Records Exposed:

Your Exposed Information

Your Risk Level

How This Affects You

Full Breach Details

Premium Insights

Unlock Critical Security Information

Create a free account to access:

  • Full Breach Impact Analysis
  • Identity Theft Risk Score
  • Exposed Credentials Details
  • Personalized Security Recommendations
Create Free Account

Identity Theft Risk Score

Risk Score: 8.7/10 - Critical

Data Exposure Analysis

Passwords Critical
Financial High
Personal Medium
Social High
Security Critical

Breach Timeline Analysis

March 2024 Multiple credentials exposed in recent data breach
January 2024 Password found in dark web marketplace
December 2023 Personal information leaked in major security incident

Security Recommendations

High Priority
Password Security

Critical: Change compromised passwords immediately and enable 2FA on all accounts

Important
Financial Protection

Monitor credit reports and set up fraud alerts with major credit bureaus

Recommended
Identity Protection

Enable advanced identity monitoring and dark web surveillance