Someone Has Your Facebook Password: 58 Accounts Leaked

HEROIC identified a stealer log containing 58 Facebook account credentials that was shared on Telegram in December 2022. Each record includes an email address, a plaintext password, and the Facebook login URL. Though small in number, these stolen credentials could give attackers access to private messages, personal photos, connected apps, and the ability to impersonate real people.

Your Facebook Password in Plain Text

Every password in this file appears in plaintext, completely readable and instantly usable. For Facebook accounts, this is deeply personal. An attacker does not need any special tools to read your password from this file and log into your account. Within minutes, they can change your password, lock you out, and begin exploiting your profile.

What Was Exposed

• Email addresses linked to Facebook accounts
• Plaintext passwords stored in fully unencrypted form
• URLs confirming the login target as Facebook

A Compromised Facebook Account Affects Everyone You Know

When an attacker takes over a Facebook account, the impact radiates outward. They can message your friends and family with phishing links, post scams under your identity, access private conversations, and harvest personal information. If you use your Facebook password on other sites, credential stuffing extends the breach to your email, banking, and other critical accounts.

How Facebook Credentials Get Stolen by Malware

Infostealer malware captures Facebook passwords when they are saved in a web browser. The malware runs silently on infected devices, extracting stored credentials along with cookies and session tokens. This stolen data is packaged into log files and distributed on Telegram channels. Victims typically discover the theft only after noticing suspicious activity on their accounts or receiving alerts from friends.

Check If Your Credentials Were Exposed

Facebook users should not assume they are safe just because this leak is small. HEROIC's breach scanner searches more than 400 billion compromised records to identify exposed credentials. Check your email address now. If your Facebook password has been compromised, change it immediately, enable two-factor authentication, and review your account's active sessions for unauthorized access.