Reused Passwords at Risk: 100k Mix Leak Exposes 98,084 Logins

Reused Passwords Are at Risk After the "100k Mix" Stealer Log Surfaces With 98,084 Records

On February 28, 2023, HEROIC analysts identified a stealer log dataset shared by a Telegram user under the label "100k mix." The file contained 98,084 records, and each one paired an email address with a plaintext password and the URL of the site that login was used on.

Why This Stealer Log Is Dangerous

Almost 100,000 working logins in one file is a serious amount of ready-to-use access. Because the passwords are stored in plaintext, there is no cracking involved, anyone who opens the file can read and use them immediately. The matching URL for each record removes any guesswork about which account the credential unlocks.

What Was Exposed

• Email addresses
• Plaintext passwords
• URLs identifying the site each login was used on

Why This Matters

A dataset of this size is exactly what credential stuffing tools are designed for, automatically testing each email and password pair against dozens of other sites and apps. Anyone among these 98,084 people who reused a password is at elevated risk of account takeover on services entirely unrelated to the one exposed here. The included URL gives an attacker a direct starting point instead of having to guess.

How Stealer Logs Work

Stealer logs are created by malware that infects a device and silently harvests saved browser passwords, autofill entries, and site URLs before sending everything back to the attacker running the malware. Common infection paths include pirated software, fake installers, and malicious attachments. Once gathered, logs like this one are bundled together and traded on Telegram channels and dark web forums.

Check If You Are Affected

With nearly 100,000 records in this leak, it is worth checking your own exposure directly. HEROIC's free breach scanner searches a database of more than 400 billion leaked records, including stealer logs like this one, and shows you exactly what has been exposed so you can secure your accounts right away.