QLogs 500 PCS Jun 30, 2025: 16,158 US Credentials Released Without VIP Label

No VIP, No Problem? QLogs 500 PCS Jun 30 Releases 16,158 US Records Without the Premium Label

Most QLogs PCS releases in 2025 carry the VIP designation -- a signal that per-file yield has cleared the operator's quality threshhold of approximately 38-40 records per file. The batch "QLogs 500 PCS 30-06-25" is one of only two exceptions observed in the dataset, releasing on June 30, 2025 without the VIP prefix. At 16,158 US credentails across 500 files, the per-file yield lands at approximately 32.3 rec/file -- below the threshold but still comfortably above the floor yield seen in MIX-tier batches. The same-day release date confirms the batch was processed through the PCS pipeline, just without the quality certification that elevates a release to VIP status.

QLogs 500 PCS (June 30, 2025): Stealer Log Summary

• Records Exposed: 16,158
• Data Types: Email addresses, plaintext passwords, URLs
• Breach Type: Stealer log -- credentials harvested from malware-infected endpoints, not a direct database breach
• Password Type: Plaintext -- captured directly from browser sessions and credential stores by infostealer malware
• Country: United States
• Date Leaked: June 30, 2025

What the Missing VIP Label Actually Means

The VIP designation in QLogs batches is not an arbitrary marketing term -- it reflects a measurable quality metric. Based on the observed dataset, VIP PCS batches yield approximately 38-82 rec/file, while non-VIP PCS batches fall below that floor. At 32.3 rec/file, the June 30 batch likely originates from an endpoint pool with lower credential density: users who save fewer passwords in their browsers, devices with limited browsing history, or endpoints where the infostealr's dwell time was too short to capture a full credential inventory. The batch was worth releasing -- 16,158 US plaintext records still have significant value for credential stuffing -- but the operator applied honest labeling rather than inflating the release tier.

Context in the Late-June Series

The June 30 non-VIP release sits immediately after the June 27 batch at ~82.38 rec/file -- the series high. The contrast is striking: three days separate a record-breaking yield from one of the dataset's lowest PCS outputs. The most likely explanation is that the two batches draw from entirely different infection campaigns or targeting geographies within the US, despite both being same-day PCS releases. The June 27 ultra-high-yield batch may reflect a premium consumer endpoint campaign; the June 30 batch, running the same infrastructure but against a different or lower-density endpoint pool, produced a more modest haul. Same pipeline, different raw material.

Check If Your Data Was Exposed

HEROIC's free breach scanner searches across more than 400 billion exposed records to check whether your email address or passwords have been exposed in stealer log datasets, including non-VIP releases like this one. Even at 32.3 rec/file, the 16,158 records in this batch carry plaintext passwords ready for immediate use in credential stuffing attacks. Search your email at HEROIC's breach scanner and update any matched passwords before they're used against you.