Synthient Stealer Log Threat Data Data Breach

What happened

During 2025, Synthient aggregated billions of records of "threat data" from various internet sources. The data contained 183M unique email addresses alongside the websites they were entered into and the passwords used. After normalising and deduplicating the data, 183 million unique email addresses remained, each linked to the website where the credentials were captured, and the password used. This dataset is now searchable in HIBP by email address, password, domain, and the site on which the credentials were entered.

Exposed data

Recommended actions

• Change your Synthient Stealer Log Threat Data password immediately, and update it anywhere you reused the same password.
• Enable two-factor authentication on the affected account and on your critical services (email, banking).
• Watch for targeted phishing emails referencing Synthient Stealer Log Threat Data — attackers weaponise breach data quickly.
• Check whether your email address appears in this breach on haveibeenpwned.com.