Slurm Logs Data Breach Exposes 143,077 HPC Credentials

HEROIC's DarkHive intelligence system discovered the Slurm Logs stealer log breach, exposing 143,077 records. The incident occured in April 2025, when a Telegram user uploaded stolen credential data on April 7, 2025. Exposed records included email addresses, plaintext passwords, and URLs linked to Slurm workload manager environments, including internal API hostnames and endpoint information.

Why This Is Dangerous

With 143,000 plaintext passwords exposed in one dump, attackers have an enormous ready-to-use credential list requiring no additional work. The internal API hostnames and endpoint URLs in this breach go beyond simple account access: they give criminals a detailed roadmap of backend infrastructure. Attackers can use these to bypass authentication controls, access sensitive cluster data directly, or pivot into connected research and enterprise systems without detection.

What Was Exposed

• Email Addresses
• Plaintext Passwords
• URLs

Why This Matters

A 143,000-record credential dump fuels credential stuffing attacks that run simultaneously against email providers, banking platforms, cloud services, and corporate VPNs. Users who recieve the same password across multiple accounts face widespread account takeover risk. Organizations running Slurm-managed HPC clusters risk losing control of computational resources, proprietary research, and sensitive operational data. The scale of this breach means thier impact extends across hundreds of organizations that had users in the exposed dataset.

How Stealer Log Works

Stealer log malware targets developer workstations and high-privilege accounts, making it particularly dangerous in enterprise and research settings. The malware arrives through phishing campaigns or trojanized software and silently captures browser passwords, saved credentials, and session tokens. Everything gets bundled into a log file and exfiltrated to attacker servers. These logs then get posted to Telegram channels where multiple criminal actors download and use them to launch seperate waves of attacks against the exposed individuals and organizations.

Check If You Are Affected

HEROIC offers a free identity scanner that searches over 400 billion records, including data from breaches like Slurm Logs uploaded by Slurm Logs Free logs. Visit heroic.com to scan your email address and find out if your information was exposed.