Data Troll Stealer Logs Data Breach (2025)

On June 20, 2025, security researchers added 109.5 million unique email addresses and associated passwords to Have I Been Pwned after a threat actor known as Data Troll compiled and leaked stealer logs containing 2.7 billion rows of credential data.

What Public Reporting Shows

Public reporting indicates the dataset was not a single fresh breach of one company. Instead it consisted primarily of logs harvested by infostealer malware over time, with many records drawn from older, already-public leaks. Only a relatively small portion represented new material. The compilation was released under the name Data Troll Stealer Logs, and the specific websites targeted by the original stealer infections can be searched directly in the Have I Been Pwned dashboard. Available reporting describes the incident as a large-scale aggregation rather than a targeted attack on any one organization’s infrastructure.

Why This Matters for You and Your Family

If any of the 109.5 million exposed email addresses belongs to you, the password paired with it in the leak may still work on other services. Stealer logs typically capture credentials entered on infected devices, which means the same password you used years ago on a compromised computer could now be in the hands of identity thieves. For families this risk multiplies quickly: a parent’s reused password can lead to access to shared accounts, children’s school portals, or family streaming and shopping profiles. Once criminals obtain even one valid email-password combination, they can pivot to reset additional accounts, request SIM swaps, or sell the data on underground markets.

Passwords and email addresses remain two of the most valuable pieces of information for criminals because they serve as the front door to nearly every online service you rely on.