Slurm Logs Breach Exposes 79,162 HPC User Records

HEROIC's DarkHive intelligence system discovered the Slurm Logs stealer log breach, exposing 79,162 records. The incident occured in April 2025, when a Telegram user uploaded a large collection of stolen credentials on April 9, 2025. The exposed records included email addresses, plaintext passwords, and URLs tied to systems using the Slurm workload manager deployed in high-performance computing environments.

Why This Is Dangerous

This breach exposed nearly 80,000 records in a single dump, giving attackers a massive pool of working credentials. Plaintext passwords require no cracking: attackers copy them directly into login tools and begin account takeover operations immediately. The included API host URLs reveal internal endpoints, giving criminals a map of infrastructure they can attack directly without going through standard authentication systems.

What Was Exposed

• Email Addresses
• Plaintext Passwords
• URLs

Why This Matters

Credential stuffing campaigns powered by 79,000-record dumps can run automatically across hundreds of platforms within hours. Users who recieve the same password across multiple accounts face takeover risk on every one of those services. Identity theft, unauthorized purchases, and fraudulent account changes follow rapidly after credentials are compromised. For organizations using Slurm clusters, thier research data, computational results, and internal system access may all be at risk from attackers holding these credentials.

How Stealer Log Works

Stealer logs are created by malware that infects a user's computer through phishing emails or malicious software downloads. Once installed, the malware collects all saved browser passwords, active session tokens, and clipboard history. It bundles this data into a structured log file and sends it to attacker-controlled servers. The logs then get shared publically on Telegram channels where criminal communities use them to launch account takeover and fraud campaigns against the victims across many seperate services.

Check If You Are Affected

HEROIC offers a free identity scanner that searches over 400 billion records, including data from breaches like Slurm Logs uploaded by Slurm Logs Free logs. Visit heroic.com to scan your email address and find out if your information was exposed.