Breach Intelligence Report 27 Sep 2025

QLogs VIP 1370 MIX: 56,696 US Credentials in High-Yield July 2025 Release

HEROIC
HEROIC Threat Intelligence Team
Email Addresses Plaintext Password Urls
Your email may be in this breach. Check in 5 seconds — free, no signup required.
Scan Email →
Records Exposed 56,696
Source Type Stealer log
Origin Telegram
Password Type plaintext

QLogs VIP 1370 MIX: 56,696 US Credentials and One of the Highest MIX-Tier Yields in the Series

QLogs VIP 1370 MIX 18-07-2025 landed July 30, 2025 with 56,696 US stealer log credentials across 1,370 endpoint files. At ~41.4 records per file, this batch posts the highest documented yield for any QLogs MIX-tier release in the series -- significantly above the 24-37 rec/file range that characterizes most VIP MIX batches. Combined with its substantial 1,370-file scope, this is one of the most analytically interesting batches in the documented set. Its July 30 release date also coincides with the VIP 500 PCS 29-07-25 batch -- two separate releases in one day, covering a combined 1,870 files and more than 78,000 US credentials.


QLogs VIP 1370 MIX (July 2025): Stealer Log Summary

  • Records Exposed: 56,696
  • Data Types: Email addresses, plaintext passwords, URLs
  • Breach Type: Stealer log -- credentials harvested from malware-infected endpoints, not a direct database breach
  • Password Type: Plaintext -- captured directly from browser sessions and credential stores by infostealer malware
  • Country: United States
  • Date Leaked: July 30, 2025

41.4 Records Per File: What Pushes a MIX Batch Into Premium Yield Territory

Most QLogs VIP MIX batches land between 28-37 records per file. The VIP 1370 MIX at ~41.4 rec/file is an outlier within the MIX designation -- a yield level that in other batches would trigger a VIP PCS dual-label upgrade. The fact that this batch carries only the MIX label despite its elevated yield may reflect how the operator distinguishs between endpoint type (consumer/mixed vs. specifically targeted PCS pools) and raw yield metrics. Alternatively, the July 2025 period may represent a different harvesting campaign or infostealer variant that captured more credential stores per endpoint. The 12-day staging window (Jul 18 collection to Jul 30 release) is consistent with the operator's standard pipeline.


July 30 Double Release: VIP 1370 MIX and VIP 500 PCS on the Same Day

On July 30, 2025, QLogs released two separate batches: this VIP 1370 MIX (1,370 files, 56,696 records) and VIP 500 PCS 29-07-25 (500 files, 21,699 records). Together they represent 78,395 US credentials in a single day across 1,870 endpoint files. The July 30 double release mirrors the August 28 triple release documented later in the series -- the operator consistently uses coordinated multi-batch releases to maximize market impact and buyer convenince. The coexistence of a large MIX batch and a smaller PCS batch in the same release window suggests the operator stages different batch types on the same distribution schedule.


Check If Your Data Was Exposed

HEROIC's free breach scanner searches across more than 400 billion exposed records -- including stealer log credential sets like this QLogs VIP 1370 MIX batch. With 56,696 US credentials and the highest MIX-tier yield in the series, this batch represents a significant exposure event. Check at HEROIC's breach scanner to see if your email was included.

Breach Breakdown

Domain N/A
Leaked Data Email Addresses,Plaintext Password,URLs
Password Types plaintext
Date Leaked 27 Sep 2025
Check in 5 seconds

56,696 passwords exposed. Is yours one of them?

Enter your email to scan this breach plus 400B+ other leaked records. If you're compromised, we'll show you exactly where and what to change.

All information submitted is Private and Secure. We do not sell or share email addresses. By searching, you agree to HEROIC's Privacy Policy and Terms of Service.

Free forever · No account required · Results in seconds

Private & Secure No Account Needed 2,744 scanned today
Breach Rank #5,069 by affected users
Impact Score
2
sensitivity + scale + recency
Est. Financial Impact $410.3K fraud, phishing & misuse risk
Scan your email Free →
Scan to sign up

Scan to sign up instantly

24/7 Dark Web Monitoring
Instant Breach Alerts
Secure Data Protection
Your Data is at Risk

Your Personal Information is Exposed

We found your data exposed in multiple breaches. This includes:

  • Email addresses
  • Passwords
  • Phone numbers
  • Financial information
Secure My Information Now

Your information is protected by enterprise-grade security

Your Breach Details

Date:
Severity:
Records Exposed:

Your Exposed Information

Your Risk Level

How This Affects You

Full Breach Details

Premium Insights

Unlock Critical Security Information

Create a free account to access:

  • Full Breach Impact Analysis
  • Identity Theft Risk Score
  • Exposed Credentials Details
  • Personalized Security Recommendations
Create Free Account

Identity Theft Risk Score

Risk Score: 8.7/10 - Critical

Data Exposure Analysis

Passwords Critical
Financial High
Personal Medium
Social High
Security Critical

Breach Timeline Analysis

March 2024 Multiple credentials exposed in recent data breach
January 2024 Password found in dark web marketplace
December 2023 Personal information leaked in major security incident

Security Recommendations

High Priority
Password Security

Critical: Change compromised passwords immediately and enable 2FA on all accounts

Important
Financial Protection

Monitor credit reports and set up fraud alerts with major credit bureaus

Recommended
Identity Protection

Enable advanced identity monitoring and dark web surveillance