All breaches
Operation Endgame 2.0 data breach15.4M accounts compromised on 2025-05-23
Verified
Malware
Operation Endgame 2.0 was the source of a malware-distribution breach dated 2025-05-23, exposing 15,436,844 accounts. The details below are mirrored from Have I Been Pwned and reflect the source's account of the incident at the time of publication.
Incident Report
| Target Organization | Operation Endgame 2.0 |
|---|---|
| Source Name | OperationEndgame2 |
| Domain | — |
| Breach Date | 2025-05-23 |
| Added to HIBP | 2025-05-23 |
| Last Modified | 2025-05-25 |
| Accounts Compromised | 15,436,844(15.4M) |
| Data Exposed | Email addressesPasswords |
| Status | Verified by HIBP Malware |
Description
In May 2025, a coalition of law enforcement agencies took down the criminal infrastructure behind the malware used to launch ransomware attacks in a new phase of "Operation Endgame". This followed the first Operation Endgame exercise a year earlier, with the latest action resulting in 15.3M victim email addresses being provided to HIBP by law enforcement. A further 43.8M victim passwords were also provided for HIBP's Pwned Passwords service.
Disclaimer
HackerFeeds does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.