QLogs VIP 600 MIX: 14,958 US Credentials at Lowest Yield Rate in the 2025 Series (Aug 2025)

QLogs VIP 600 MIX Posts the Lowest Yield Rate in the Series at 24.9 Records Per File

Not every QLogs batch is equal -- and QLogs VIP 600 MIX 04-08-2025 is a case in point. Released August 15, 2025 with 14,958 US credentials across 600 endpoint files, it averages approximately 24.9 records per file. That's the lowest per-file yield rate in the documented QLogs 2025 US series, sitting below the typical 28-37 rec/file range seen in sibling MIX batches. A lower yield doesn't mean lower risk for victims -- plaintext credentials from any stealer log are immediately exploitable. But it does tell a story about the endpoint pool this batch came from.

QLogs VIP 600 MIX (August 2025): Stealer Log Summary

• Records Exposed: 14,958
• Data Types: Email addresses, plaintext passwords, URLs
• Breach Type: Stealer log -- credentials harvested from malware-infected endpoints, not a direct database breach
• Password Type: Plaintext -- captured directly from browser sessions and credential stores by infostealer malware
• Country: United States
• Date Leaked: August 15, 2025

Why 24.9 Records Per File: Sparse Endpoints and Light Browser Use

Per-file yield in stealer logs tracks how many saved credentials the malware found on each compromised machine. At ~24.9, the VIP 600 MIX endpoints had fewer stored credentials than typical. Several factors could explain this: machines with minimal browser usage (light consumers, infrequent online shoppers), endpoints where the infostealer ran briefly before removal or reboot, or a harvest vector that reached less credential-dense machines. The August 4 collection date and 11-day staging window (leaked August 15) are consistent with the standard QLogs pipeline. The batch was still labeled VIP -- the operator apparently found the credential quality, if not the quantity, sufficient for premium-tier distribution.

600 Files, the Smaller Batch Footprint

At 600 files, this is among the smaller QLogs US batches by endpoint count, alongside the VIP 500 PCS batch. The combination of a lower file count and the series-low yield rate produces the 14,958 record total -- the smallest batch by record count in the documented QLogs US 2025 series. This doesn't indicate reduced operational activity; the QLogs operator released multiple batches in August, with larger deployments before and after this one. VIP 600 MIX may represent a supplemental harvest run between larger campaigns, or a geographically or demographically narrower sweep that happened to capture lighter-credential-load endpints.

Check If Your Data Was Exposed

HEROIC's free breach scanner searches across more than 400 billion exposed records -- including stealer log credential sets like this QLogs VIP 600 MIX batch. Even small batches can include your credentials. Check now at HEROIC's breach scanner and take action if your email appears in the results.