Slurm Logs Hack: Emails and Passwords of 71,406 U.S. Users Leaked

HEROIC's DarkHive intelligence system discovered the Slurm Logs data breach, exposing 71,406 records on August 27, 2025. This Telegram-distributed stealer log was part of a multi-week campaign targeting U.S. users, containing email addresses, plaintext passwords, and target login URLs captured from infostealer-infected devices.

Why This Is Dangerous

Each record in this dataset gives attackers a complete login package: the email address, the exact password used, and the specific website where those credentials were entered. Attackers use this to bypass authentication on banking sites, corporate intranets, and personal email accounts without needing to guess anything. The 71,406 records released on August 27 represent a massive trove of ready-to-use account access data, and thier distribution through Telegram puts them in front of thousands of potential attackers within minutes.

What Was Exposed

• Email addresses
• Plaintext passwords
• Login URLs

Why This Matters

Credential stuffing attacks powered by stealer log data move fast. Automated tools test thousands of email-password pairs per minute across banking, ecommerce, and social media platforms, leading to rapid account takeover at scale. Victims whose credentials appear in this release face risks of identity theft, unauthorized financial transactions, and fraud. Reused passwords across multiple sites multiply the damage significantly, as a single captured credential can unlock many seperate accounts.

How Stealer Logs Work

Stealer log campaigns begin with malware infections: victims click a phishing link, download compromised software, or visit a malicious website. The infostealer installs silently and begins capturing every login the user submits across all websites. The collected data is exfiltrated to operator-controlled servers, packaged into structured log files, and distributed through Telegram channels. The entire process is automated and requires no ongoing interaction with the victim. Most victims never know thier credentials have been captured until they notice account compromises.

Check If You Are Affected

HEROIC offers a free identity scanner that searches over 400 billion records, including data from breaches like Slurm Logs SlurmLogs uploaded by a Telegram User. Visit heroic.com to scan your email address and find out if your information was exposed in this August 27, 2025 stealer log release.