Stealer Logs, Jan 2025 Data Breach

What happened

In January 2025, stealer logs with 71M email addresses were added to HIBP. Consisting of email address, password and the website the credentials were entered against, this breach marks the launch of a new HIBP feature enabling the retrieval of the specific websites the logs were collected against. The incident also resulted in 106M more passwords being added to the Pwned Passwords service.

Exposed data

Recommended actions

• Change your Stealer Logs, Jan 2025 password immediately, and update it anywhere you reused the same password.
• Enable two-factor authentication on the affected account and on your critical services (email, banking).
• Watch for targeted phishing emails referencing Stealer Logs, Jan 2025 — attackers weaponise breach data quickly.
• Check whether your email address appears in this breach on haveibeenpwned.com.