June 2026 Stealer Logs data breach: 56.3M accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2026-06-15
In June 2026, a collection of accumulated stealer logs from various sources was added to HIBP. The corpus comprised 56M unique email addresses across hundreds of millions of stealer log records. The data also contained 124M unique passwords, which have been added to Pwned Passwords and are now searchable. Individuals can view any records captured against their email address in the stealer logs section of their dashboard. Organisations can see logs affecting their domain via the stealer logs API. Exposed data: email addresses, passwords. The breach dates from Jun 15, 2026; Have I Been Pwned loaded it on Jun 15, 2026.
What to do
- If you had a June 2026 Stealer Logs account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch
