QLogs VIP 1000 MIX: 31,321 US Credentials From Aug 15 Collection, Leaked Aug 28 (2025)

Same Collection Date, Different Release Day: QLogs VIP 1000 MIX and the Aug 15 Dual Harvest

QLogs VIP 1000 MIX 15-08-2025 surfaced August 28, 2025 with 31,321 US stealer log credentials across 1,000 endpoint files. Its collection date -- August 15 -- is shared with another batch in the series: VIP 1120 MIX, which was released separately on August 22. Two batches. Same collection date. Six days apart in distribution. That split reveals something about how the operator stages output: a single large harvesting event on August 15 produced enough raw material for at least two separate VIP-tier releases, each taking a different path to market.

QLogs VIP 1000 MIX (August 2025): Stealer Log Summary

• Records Exposed: 31,321
• Data Types: Email addresses, plaintext passwords, URLs
• Breach Type: Stealer log -- credentials harvested from malware-infected endpoints, not a direct database breach
• Password Type: Plaintext -- captured directly from browser sessions and credential stores by infostealer malware
• Country: United States
• Date Leaked: August 28, 2025

August 15 as a Harvesting Anchor Point

When two QLogs batches share an August 15 collection date -- VIP 1000 MIX (1,000 files, 31,321 records, released Aug 28) and VIP 1120 MIX (1,120 files, 40,944 records, released Aug 22) -- it suggests August 15 was a significant operational milestone for the operator: either a large deployment of infostealer malware, a bulk acquisition of raw logs from affiliate sources, or both. Combined, the two Aug 15-collection batches account for 2,120 endpoint files and 72,265 credentials. Splitting that harvest into separate releases allows the operator to manage market supply, sustain buyer interest across multiple release events, and segment output for different buyer tiers or audiences.

Anchoring the Aug 28 Triple Release: The Largest of Three

Among the three simultaneous August 28 releases -- VIP 900 MIX (27,993), VIP 940 MIX (26,489), and VIP 1000 MIX (31,321) -- this batch is the largest by both file count and record count. At ~31.3 records per file, its yield is also the highest of the three, closely matching the MIX-series midpoint. The 1,000-file count is a round number that may reflect the operator's packaging preferences -- grouping into clean batches is common in organized stealer log operatons and makes verification easier for buyers evaluating yield before purchase.

Check If Your Data Was Exposed

HEROIC's free breach scanner searches across more than 400 billion exposed records -- including stealer log credential sets like this QLogs VIP 1000 MIX batch. If your email was captured by infostealer malware, check now at HEROIC's breach scanner and change affected passwords before they're used in a credential stuffing attack.