QLogs VIP 1120 MIX: Part of a Split Aug 15 Harvest, 40,944 US Credentials Released Aug 22

QLogs VIP 1120 MIX: Part of a Split Aug 15 Harvest Released Six Days Before Its Sibling

QLogs VIP 1120 MIX 15-08-2025 landed August 22, 2025 with 40,944 US stealer log credentials across 1,120 endpoint files. Seven days separated its August 15 collection from its August 22 release -- a tight turnaround relative to the 9-13 day windows seen in other QLogs batches. What distinguishes this batch from the rest of the series is its collection date: August 15 is also the collection date for QLogs VIP 1000 MIX, which was held back and released six days later on August 28. Two batches. One harvest event. Deliberatley staged release.

QLogs VIP 1120 MIX (August 2025): Stealer Log Summary

• Records Exposed: 40,944
• Data Types: Email addresses, plaintext passwords, URLs
• Breach Type: Stealer log -- credentials harvested from malware-infected endpoints, not a direct database breach
• Password Type: Plaintext -- captured directly from browser sessions and credential stores by infostealer malware
• Country: United States
• Date Leaked: August 22, 2025

The Aug 15 Dual Harvest: 2,120 Endpoints, Two Release Windows

The August 15 collection event produced at least two separate QLogs batches: VIP 1120 MIX (this batch, 1,120 files, 40,944 records) and VIP 1000 MIX (1,000 files, 31,321 records). Combined, those two batches account for 2,120 endpoint files and 72,265 credentials -- all from a single day's harvesting activity. Splitting output from the same event into two separate market releases is a deliberate operator strategy: it spaces out the supply available to buyers, creates multiple release events for channel visibility, and allows the operator to test demand before committing the full inventory. The 6-day gap between the two releases (Aug 22 vs Aug 28) suggests VIP 1120 MIX was prioritized -- likely because its slightly higher per-file yield (~36.6 vs ~31.3) made it the more appealing premium offering.

1,120 Files at 36.6 Records Per File: Near the Top of the MIX-Tier Range

At ~36.6 records per file, QLogs VIP 1120 MIX sits near the upper bound of the typical MIX-tier yield range (24-37 rec/file). This is the second-highest yield in the documented MIX batches, behind only the VIP 500 PCS anomaly. For a 1,120-file batch that's not flagged as a PCS premium, hitting 36.6 rec/file suggests either slightly above-average endpoint credential density or a harvest vector that captured more data stores per machine. The 40,944 total records make this one of the larger absolute outputs in the series -- behind only VIP 1575 MIX (50,848) and VIP 4450 PCS (171,913) among the batches reviewed.

Check If Your Data Was Exposed

HEROIC's free breach scanner searches across more than 400 billion exposed records -- including stealer log credential sets like this QLogs VIP 1120 MIX batch. If your email was captured by infostealer malware, you can check now at HEROIC's breach scanner and secure your accounts before the data is weaponized.