33,278 Passwords From the SQWONKERLOGS15 Dump Just Surfaced Online

HEROIC analysts found a stealer log called SQWONKERLOGS15 uploaded to a public Telegram channel on December 24, 2022. The file exposed 33,278 records, each pairing an email address with a plaintext password and the URL of the login it belongs to.

Why the SQWONKERLOGS15 Leak Is So Dangerous

Thirty three thousand plaintext passwords is a large number of ready-to-use logins in one place. Because the passwords were captured and stored without any encryption, anyone who downloads the file can start using them right away, with no cracking required.

What Was Exposed in the SQWONKERLOGS15 Leak

• Email addresses
• Plaintext passwords
• URLs tied to each login

Why This Matters for the 33,278 People Affected

Anyone in this dataset who reused a password on other accounts is exposed well beyond the login named in the file. Attackers routinely take stolen credentials like these and run them against banks, email providers, and shopping sites through credential stuffing, which can lead directly to account takeover, identity theft, and financial fraud.

How a Stealer Log Like SQWONKERLOGS15 Gets Made

Stealer malware infects a device and quietly collects saved browser passwords, autofill data, and visited URLs, then sends everything back to whoever controls the malware. That data is packaged into a log file and often shared for free on Telegram, exactly how SQWONKERLOGS15 reached public view. Because it comes straight from an active device, the credentials tend to still work at the time of exposure.

Check If You Are Affected by This Leak

If you want to know whether your email or passwords appear in the SQWONKERLOGS15 leak or any other breach, HEROIC's free breach scanner checks your information against a database of more than 400 billion leaked records in seconds.