UP_KURZL0G 130 Leaked 1,657,664 Logins With Plaintext Passwords

1,657,664 login records. That's the size of the file a Telegram user dropped on November 5, 2025, labeled "ULP New Fresh Database Nov 5 - UP_KURZL0G 130." No fanfare, no explanation, just a raw dump of emails, plaintext passwords, and the URLs tied to each one.

Why This Is Dangerous

Numbers this large are hard to picture, but here's the simple version: over 1.6 million people had their actual passwords, not hashed versions, sitting in a plain text file anyone on that Telegram channel could download. There's no cracking required, no guessing games. The credentials work exactly as typed, wich makes them immediately usable by anyone who grabs the file.

What Was Exposed

• Email addresses for over 1.6 million accounts
• Plaintext passwords with no encryption or hashing
• URLs identifying which sites each login belongs to

Why This Matters

A leak of this size doesn't stay contained to one small community. It spreads fast across other Telegram channels, forums, and marketplaces, and criminals routinely test these credentials against banking sites, email providers, and shopping accounts to see what still works. This isn't the first time a leak like this has occured, and it definately won't be the last. If you reuse passwords across sites, one leaked login can quickly turn into several compromised accounts.

How Stealer Logs Work

Files labeled "ULP" (short for URL, Login, Password) come from infostealer malware that infects a victim's device and quietly harvests everything saved in the browser. It doesn't target one website, it grabs whatever is stored, banking portals, email, social media, and packages it all into a log like the "UP_KURZL0G 130" file that ended up on Telegram.

Check If You Are Affected

With over 1.6 million records in this single file alone, the odds that someone you know is affected are high. HEROIC's free scanner checks your email against more than 400 billion (400B+) compromised records, including logs like this one, so you can find out right away and change any passwords that need it before they're used against you.