Is Your Rogers Account Safe? 1,416 Passwords Leaked Online

What HEROIC Analysts Found

In June 2026, HEROIC analysts found a stealer log posted to Telegram containing 1,416 records tied to rci.rogers.com, a domain used by Rogers Communications in Canada. The log included email addresses, plaintext passwords, and the login URLs those credentials open. If you use a Rogers account, this is worth reading carefully, since this data was harvested directly from infected devices, not a breach of Rogers' own systems.

Why This Should Matter to You

If your email and password show up in a log like this, an attacker doesn't need to guess anything. They have your email, your password exactly as you typed it, and the exact page it logs into. That means the only thing standing between your account and someone else logging in as you is whether you've changed that password since.

What Was Exposed

• Email addresses
• Plaintext (unencrypted) passwords
• Login URLs tied to each set of credentials

Why This Matters

Because these passwords are stored in plaintext, they work immediately without any cracking. If you reused your rci.rogers.com password on another account, you are exposed to credential stuffing, where the same login is tested automatically across banking, email, and shopping sites. A compromised email can also be used to reset passwords on your other accounts, so the risk doesn't stop at Rogers.

How Your Credentials Could End Up in a Stealer Log

This data comes from infostealer malware, malicious software that infects a device, often through a fake download or cracked application, and quietly copies saved browser passwords, autofill data, and active sessions. The results are compiled into a log and posted to Telegram, where they can be merged with other logs into larger searchable collections.

Check If You Are Affected

If you have a rci.rogers.com account, check now whether your credentials are part of this leak. HEROIC's free breach scanner checks your email against a database of more than 400 billion exposed records, including stealer logs like this one, so you can find out in seconds and change your password before anyone else uses it.