Slurm Logs Jun 22 2025: 39,056 U.S. Credentials Leaked in Mid-June Drop

HEROIC's DarkHive intelligence system discovered the Slurm Logs data breach dated June 22, 2025, exposing 39,056 records. This Telegram-distributed stealer log confirms the Slurm Logs campaign was active in mid-June 2025, weeks before the better-known July releases. It contains email addresses, plaintext passwords, and login URLs captured by infostealer malware from U.S. user devices.

Why This Is Dangerous

Stealer logs expose plaintext credentials captured live at the point of login. Each of the 39,056 records contains a working password paired with the exact website where it was submitted. Attackers recieving this data can immediately begin credential stuffing attacks against banking, email, and social media platforms with no cracking required. Thier automated tools can validate thousands of login attempts per hour across multiple live services.

What Was Exposed

• Email addresses
• Plaintext passwords
• Login URLs

Why This Matters

The June 22 dataset is among the earliest confirmed drops in the Slurm Logs series, meaning these credentials have been in attacker hands longer than almost any other release in the campaign. The exposure window extends from June 22, 2025 through the present day, giving attackers ample time to test, trade, and incorporate the data into credential stuffing operations. Identity theft, financial fraud, and unauthorized account access are the primary risks. Password reuse across seperate platforms multiplies the threat: a single captured credential pair can unlock multiple accounts the victim uses on other services, making immediatly updating passwords critical for anyone in this dataset.

How Stealer Logs Work

Infostealer malware spreads through phishing emails, fake software downloads, and compromised websites. Once silently installed on a victim device, it captures every login session: the email address, the plaintext password, and the target URL. This data is exfiltrated to operator servers and published in batches through Telegram channels like Slurm Logs. Mid-June releases like this one show the operation had established infrastructure well before its high-volume July phase.

Check If You Are Affected

HEROIC offers a free identity scanner that searches over 400 billion records, including data from breaches like Slurm Logs SlurmLogs uploaded by a Telegram User. Visit heroic.com to scan your email address and find out if your credentials were exposed in this June 22, 2025 stealer log release or any other drop in the series.