QLogs VIP 4450 PCS: 171,913 US Credentials Leaked Across 4,450 Endpoints (Aug 2025)

4,450 Compromised Endpoints: QLogs VIP 4450 PCS Is the Largest US Batch by File Count

QLogs VIP 4450 PCS 30-07-25 surfaced August 10, 2025 with 171,913 US stealer log credentials across 4,450 individual endpoint files -- by far the largest QLogs US batch by file count in the series. The nearest competitor, VIP 1575 MIX, has 1,575 files. This batch is nearly three times that. At ~38.6 records per file, the yield is also at the high end of the MIX-tier normal range. The combination of scale and the dual "VIP PCS" label -- seen previously only in the anomalous VIP 500 PCS batch -- marks this as a distinctly different kind of release: not a targeted premium sweep, but a massive broad-spectrum consumer endpoint harvest.

QLogs VIP 4450 PCS (August 2025): Stealer Log Summary

• Records Exposed: 171,913
• Data Types: Email addresses, plaintext passwords, URLs
• Breach Type: Stealer log -- credentials harvested from malware-infected endpoints, not a direct database breach
• Password Type: Plaintext -- captured directly from browser sessions and credential stores by infostealer malware
• Country: United States
• Date Leaked: August 10, 2025

4,450 Files: The Scale of a Mass Consumer Endpoint Harvest

Putting 4,450 endpoints in context: the QLogs US series averages about 900-1,100 files per MIX batch. The VIP 4450 PCS batch is four to five times the typical run. This scale suggests either a major coordinated infostealer deployment -- a large phishing campaign or malvertising push that infected thousands of machines simultaneously -- or an aggregation of multiple separate harvesting runs packaged under a single batch name. The July 30 collection date and August 10 release date give an 11-day processing window, consistent with the time needed to process, sort, and package a haul of this size. The "PCS" label confirms these are consumer endpoints -- no enterprise or corporate machine flag -- but at 4,450 machines and 171,913 records, the absolute credential volume is exceptional.

The VIP PCS Dual Label Reappears: Selected Consumer Yield

Like the VIP 500 PCS batch from August 24, this batch carries both VIP and PCS designations. In the context of 4,450 files at ~38.6 rec/file, the VIP flag likely reflects the elevated per-file yield relative to standard MIX batches (which average 28-32 rec/file). The operator appears to apply the VIP label to PCS batches when yield quality exceeds a threshold -- suggesting ~38-40 records per file triggers the premium designation even for consumer endpoint pools. The VIP 500 PCS anomaly (80.3 rec/file) was extreme enough to be obvious; this batch at 38.6 rec/file represents the more typical upper bound of what earns a VIP upgrade on PCS output.

Check If Your Data Was Exposed

HEROIC's free breach scanner searches across more than 400 billion exposed records -- including massive stealer log releases like this QLogs VIP 4450 PCS batch. With 171,913 US credentials in this single batch alone, the odds of exposure are significant. Check now at HEROIC's breach scanner and take action before your credentials are used in a stuffing attack.