QLogs VIP 600 PCS: 25,111 US Credentials Released Same Day as Collection (Jul 13, 2025)

QLogs VIP 600 PCS: 25,111 US Credentials Released the Same Day They Were Collected

QLogs VIP 600 PCS 13-07-25 surfaced July 13, 2025 -- the same day as its collection date, carrying 25,111 US stealer log credentials across 600 endpoint files. At ~41.9 records per file, this batch sits in the premium-yield range consistent with other VIP PCS batches in the July series. The same-day release pattern appears repeatedly across QLogs July PCS batches: July 6, July 8, July 13, July 20, and July 22 all show collection-to-leak windows of zero to one day. This isn't coincidence -- it's a deliberate operationl choice to move small, high-quality batches to market without delay.

QLogs VIP 600 PCS (July 13, 2025): Stealer Log Summary

• Records Exposed: 25,111
• Data Types: Email addresses, plaintext passwords, URLs
• Breach Type: Stealer log -- credentials harvested from malware-infected endpoints, not a direct database breach
• Password Type: Plaintext -- captured directly from browser sessions and credential stores by infostealer malware
• Country: United States
• Date Leaked: July 13, 2025

41.9 Records Per File: A Premium PCS Yield Profile

At ~41.9 rec/file, VIP 600 PCS falls into the elevated-yield bracket that characterizes the July VIP PCS releases. Compare: July 8 (500 PCS, ~47.2 rec/file), July 13 (this batch, ~41.9 rec/file), July 22 (500 PCS, ~38.6 rec/file), July 29 (500 PCS, ~43.4 rec/file). All sit between 38-47 rec/file -- a consistent premium range that sharply contrasts with the 24-37 rec/file typical of MIX batches. The pattern suggests the July PCS batches were drawing from a consistent pool of credential-dense consumer endpoints, potentially the output of a single coordinated infostealer campaign targeting machines known to have large browser credential vaults.

July 13: A Dual-Release Day With a Striking Yield Contrast

July 13 was a double-release day for QLogs: VIP 600 PCS (this batch, 600 files, 25,111 records) and VIP 2467 PCS (2,467 files, 34,503 records) both surfaced that day. The two batches present a striking contrast: VIP 600 PCS yields 41.9 rec/file while VIP 2467 PCS yields just 14.0 rec/file. Same operator, same release day, dramatically different yield profiles. This disparity reinforces the hypothesis that the PCS batches represent distinct endpoint pools or infection campaigns -- some harvesting credential-rich machines, others sweeping a broader, sparser pool. The 600-file premium batch and the 2,467-file sparse batch may reflect the operator distributing different tiers of output simultaneously.

Check If Your Data Was Exposed

HEROIC's free breach scanner searches across more than 400 billion exposed records -- including same-day stealer log releases like this QLogs VIP 600 PCS batch. If your email was captured on July 13, 2025, it went to market the same day. Check immediately at HEROIC's breach scanner and secure any affected accounts.