QLogs VIP 1060 MIX: 40,539 US Credentials From Late-July Collection, Released Aug 7 (2025)

38.2 Records Per File: QLogs VIP 1060 MIX Delivers Near-Peak MIX Yield From Late-July Collection

QLogs VIP 1060 MIX 29-07-2025 hit August 7, 2025 -- nine days after its July 29 collection date. The 40,539 US stealer log credentials it carried span 1,060 endpoint files at ~38.2 records per file. That yield sits near the top of the documented MIX-tier range (24-37 rec/file), technically exceeding the typical MIX ceiling and approaching territory usually associated with VIP PCS batches. This batch bridges the July and August 2025 QLogs release windows -- one of the last confirmed July-collection MIX batches before the operator's late-August surge.

QLogs VIP 1060 MIX (August 2025): Stealer Log Summary

• Records Exposed: 40,539
• Data Types: Email addresses, plaintext passwords, URLs
• Breach Type: Stealer log -- credentials harvested from malware-infected endpoints, not a direct database breach
• Password Type: Plaintext -- captured directly from browser sessions and credential stores by infostealer malware
• Country: United States
• Date Leaked: August 7, 2025

July-to-August: The QLogs Harvesting Continuum

This batch's July 29 collection date places it in the transition window between the operator's July series (VIP 500 PCS batches on July 13, 20, 22, 29; VIP 600 PCS on July 13; VIP 2467 PCS on July 12; VIP 1370 MIX on July 18) and the August MIX releases. The 9-day staging interval before August 7 publication is consistent with the operator's standard processing window across the series. That regularity -- collect, stage for 9-13 days, release -- points to an automated or semi-automated pipeline rather than manual curation, with each batch queued and published on a preset schedule.

1,060 Files at 38.2 Rec/File: When MIX Approaches VIP PCS Yield Territory

Most QLogs MIX batches cap out around 36-37 records per file. At ~38.2, VIP 1060 MIX nudges above that ceiling without triggering the VIP PCS dual label that the operator applies to consumer batches with elevated yield. Either the threshold for the PCS premium designaton is higher than 38 rec/file for this batch size, or the operator chose to package this as a standard MIX release despite the above-average yield. Regardless of classification, 40,539 plaintext credential pairs from 1,060 US endpoints represent a substancial pool for downstream credential stuffing operations.

Check If Your Data Was Exposed

HEROIC's free breach scanner searches across more than 400 billion exposed records -- including stealer log credential sets like this QLogs VIP 1060 MIX batch. If your email was swept up in a late-July 2025 infostealer campaign, check now at HEROIC's breach scanner and change affected passwords before they're tested against your other accounts.