The mansory 10 Breach Put 322,373 Stolen Credentials Online

HEROIC analysts tracked a stealer log dataset shared on Telegram in December 2025 containing 322,373 records. The file, mansory 10, is part of the ongoing mansory series of credential releases and exposes email addresses, plaintext passwords, and URLs harvested from compromised devices. This dataset represents one installment in a regularly updated distribution campaign that has released multiple files totaling millions of stolen credentials.

322,373 Stolen Credentials From the mansory 10 Breach

The plaintext passwords in this dataset pair directly with email addresses and login URLs, giving attackers a ready-made credential stuffing resource. With over 322,000 records, even a modest success rate in automated login attempts can result in tens of thousands of compromised accounts across banking, email, social media, and streaming platforms. The mansory series' repeated releases suggest the underlying malware infrastructure remains active.

What the mansory 10 Breach Exposed

• Email Addresses
• Plaintext Passwords
• URLs (login endpoints from which credentials were harvested)

How an Active Malware Campaign Turns Ongoing Infections Into a Credential Stream

The mansory series, with numbered releases reaching at least 13, demonstrates how active malware infrastructure continuously feeds stolen credentials into dark web distribution channels. As new devices are infected, fresh credentials are added to the pipeline, resulting in regularly updated datasets. Victims of these ongoing campaigns may not know their credentials were stolen months after the initial infection, making periodic breach scanning an important habit.

How Stealer Log Breaches Work

Stealer logs are produced when malware infects a device and silently captures credentials from browsers and web sessions. The malware records email addresses, passwords in plaintext, and the URLs of login pages visited by the victim. These records are collected from many infected devices, packaged into numbered files like mansory 10, and distributed through Telegram channels. Each release in the series represents a new batch from an ongoing infection campaign rather than a one-time event.

Check If Your Data Was Exposed

HEROIC's free breach scanner searches more than 400 billion exposed records and tracks stealer log series like mansory across all known releases. Enter your email to find out whether you appear in mansory 10 or any other file in this series, and act on the results by updating passwords on your most sensitive accounts first.