Your Data May Be in the Xeno Logs VIP Breach of 118,889 Records

Xeno_Logs VIP: 118,889 Records Leaked From a Premium Stealer Batch

HEROIC analysts identified a stealer log package labeled "Xeno_Logs_26-9 VIP" that was uploaded to a Telegram channel on 26 September 2025. The file contained 118,889 records, each one pairing an email address with a plaintext password and the URL of the site the login was captured from.

The "VIP" tag in the name suggests this batch was positioned as a premium product, likely offered to a smaller, paying audience rather than given away as a free sample, which means the data may have circulated in a more targeted way before reaching wider distribution.

Why This Is Dangerous

If your email is in this dataset, an attacker holds your exact plaintext password and the exact site it unlocks, with nothing left to crack or guess. At nearly 119,000 records, Xeno_Logs VIP is large enough to fuel automated attacks across thousands of accounts at once, and the VIP framing suggests buyers treated this data as higher quality than typical free logs.

What Was Exposed in Xeno_Logs VIP

• Email addresses
• Plaintext passwords
• URLs of the associated login pages

Why This Matters

A leak of this size feeds directly into credential stuffing operations, where attackers automate login attempts across banking, email, and shopping platforms using reused passwords. Because so many people use the same password on multiple sites, your presence in Xeno_Logs VIP could mean exposure well beyond whatever single account or device was originally infected, potentially leading to account takeover, identity theft, or financial fraud.

How a VIP Stealer Log Like This Is Built

Stealer malware infects a device, often through a cracked download or phishing link, and quietly harvests saved browser credentials, autofill data, and active sessions. Operators then package the results into batches, sometimes reserving the largest or freshest hauls, like this one, for VIP buyers willing to pay for early or exclusive access before the data spreads more widely.

Check If You Are Affected

HEROIC's free breach scanner checks your email against more than 400 billion compromised records, including premium stealer batches like Xeno_Logs VIP. Search your email now to find out if your credentials are among the 118,889 exposed and get clear steps to secure your accounts.