ConfirmedData breach

Synthient Stealer Log Threat Data: credentials harvested by infostealer malware

During 2025, Synthient aggregated billions of records of "threat data" from various internet sources . The data contained 183M unique email addresses alongside the websites they were entered into and the passwords used. After normalising and deduplicating the data, 183 million unique email addresses remained, each linked to the website where the credentials were captured, and the password used. This dataset is now searchable in HIBP by email address, password, domain, and the site on which the credentials were entered.

The record

Organisation
Synthient Stealer Log Threat Dataas named by the source; not matched to a verified organisation
Records affected
182,962,095 records
Data exposed
Email addresses, Passwords
Sector
Not recorded
Occurred
2025-04-11
Disclosed
2025-10-21
First recorded here
2026-09-09

Sources (1)

One source so far.

  1. Have I Been PwnedFirst reported

    2025-10-21

Synthient Stealer Log Threat Data: credentials harvested by infostealer malware | NexaPulse