Operation Endgame 3.0: data obtained by malware
Between 10 and 13 November 2025, the latest phase of Operation Endgame was coordinated from Europol's headquarters in The Hague . The actions targeted one of the biggest infostealer Rhadamanthys, the Remote Access Trojan VenomRAT, and the botnet Elysium, all of which played a key role in international cybercrime. Authorities took down these three large cybercrime enablers and provided 2 million impacted email addresses and 7.4 million passwords to HIBP.
The record
- Organisation
- Operation Endgame 3.0as named by the source; not matched to a verified organisation
- Records affected
- 2,046,030 records
- Data exposed
- Email addresses, Passwords
- Sector
- Not recorded
- Occurred
- 2025-11-13
- Disclosed
- 2025-11-13
- First recorded here
- 2026-09-09
Fastnexa security experts
Worried the same could happen to your company?
If you are a customer or supplier of Operation Endgame 3.0, or work in the same industry, a Fastnexa security expert can tell you what this means for your data and test whether the same attack would work on you.
Think you’ve already been hit? Don’t wait on a form: call or WhatsApp +1 (732) 454 2616. We reply within 1 hour, 24/7. Emergency help →
Sources (1)
One source so far.
- Have I Been Pwned ↗First reported
2025-11-13