ALIEN TXTBASE Stealer Logs Data Breach

What happened

In February 2025, 23 billion rows of stealer logs were obtained from a Telegram channel known as ALIEN TXTBASE. The data contained 284M unique email addresses alongside the websites they were entered into and the passwords used. This data is now searchable in HIBP by both email domain and the domain of the target website.

Exposed data

Recommended actions

• Change your ALIEN TXTBASE Stealer Logs password immediately, and update it anywhere you reused the same password.
• Enable two-factor authentication on the affected account and on your critical services (email, banking).
• Watch for targeted phishing emails referencing ALIEN TXTBASE Stealer Logs — attackers weaponise breach data quickly.
• Check whether your email address appears in this breach on haveibeenpwned.com.