ConfirmedData breach
Synthient Stealer Log Threat Data: credentials harvested by infostealer malware
During 2025, Synthient aggregated billions of records of "threat data" from various internet sources . The data contained 183M unique email addresses alongside the websites they were entered into and the passwords used. After normalising and deduplicating the data, 183 million unique email addresses remained, each linked to the website where the credentials were captured, and the password used. This dataset is now searchable in HIBP by email address, password, domain, and the site on which the credentials were entered.
The record
- Organisation
- Synthient Stealer Log Threat Dataas named by the source; not matched to a verified organisation
- Records affected
- 182,962,095 records
- Data exposed
- Email addresses, Passwords
- Sector
- Not recorded
- Occurred
- 2025-04-11
- Disclosed
- 2025-10-21
- First recorded here
- 2026-09-09
Sources (1)
One source so far.
- Have I Been Pwned ↗First reported
2025-10-21