The UHQ MIX PART 6 0929: 291,749 Stolen Email and Password Pairs

HEROIC analysts identified this stealer log on May 7, 2023. The breach exposed 291,749 records, with stolen data including email addresses, plaintext passwords, and URLs. The source is identified as UHQ MIX PART 6 0929.

Why This Is Dangerous

With nearly 292,000 plaintext passwords included, the UHQ MIX PART 6 0929 stealer log is one of the larger credential sets in this series. The UHQ label means these credentials are flagged as high quality by the criminals who compiled them. Every exposed password is immediately usable with no decryption required, making this file a ready tool for large-scale account takeover attacks.

What Was Exposed

• Email addresses
• Plaintext passwords
• URLs (website addresses where credentials were stolen)

Why This Matters

The 291,749 stolen email and password pairs in this breach represent a significant pool of credentials for criminal use. Attackers run automated tools to test these combinations across banking portals, email services, and e-commerce platforms. For victims who reuse passwords, a single compromised credential can lead to account takeover across multiple services, financial fraud, and identity theft.

How Stealer Logs Work

Stealer log files are the output of malware that silently runs on victims' devices. The malware reads stored passwords from web browsers and captures credentials as they are entered during login sessions. Collected data is packaged by the attacker under series labels like UHQ MIX and distributed through private Telegram networks and dark web markets for other criminals to exploit.

Check If You Are Affected

HEROIC offers a free breach scanner that searches 400 billion records. Search your email address now to see if your credentials appear here or elsewhere. Free, takes seconds.