The ALIEN TXTBASE Data Breach: 23 Billion Stealer Logs Exposed in February 2025

In February 2025, a staggering data breach involving the Telegram channel known as ALIEN TXTBASE came to light, shaking the cybersecurity world with its sheer scale. The breach saw over 23 billion rows of stealer logs—malicious data collected from compromised computers—surfacing online. Among these records, investigators found a remarkable 284 million unique email addresses, as well as corresponding passwords, usernames, website URLs, and phone numbers. This massive collection originated from stealer malware distributed over several years and centrally compiled in ALIEN TXTBASE, which functioned as a Telegram-based repository and distribution hub for cybercriminals sharing or trading the logs. The breadth of exposed credentials highlights the ongoing threat posed by infostealer malware and the challenges of tracking where stolen information ends up.

What Happened in the ALIEN TXTBASE Breach?

The ALIEN TXTBASE data leak occurred after an individual or group obtained and released the database curated by a prominent Telegram channel. This archive contained stealer logs—files automatically harvested by malware from infected devices. These logs typically include sensitive data such as email addresses, user credentials, associated websites, and contact information. Once made public or traded in underground communities, these stolen logs can fuel various forms of cybercrime, from account takeovers to phishing schemes.

When Did the ALIEN TXTBASE Breach Occur?

The breach was reported in mid-February 2025, with the compromised database believed to have been assembled and distributed shortly before February 15. The logs were already circulating within cybercriminal groups, but their bulk release helped expose the full size and scope of information being collected and shared through stealer operations.

Scope of the Breach: How Many Were Affected?

ALIEN TXTBASE's dump revealed an astonishing 23 billion rows of stealer log data. Within this trove, researchers identified nearly 284 million unique email addresses. Since each log entry could correspond to different online accounts, the real-world impact extends far beyond just email—encompassing countless user identities and potentially linking them to detailed personal and online activity data. In total, over 6.1 billion records were included, reflecting repeat exposures and the vast reach of automated credential theft operations.

What Data Was Leaked in ALIEN TXTBASE?

The exposed data from the ALIEN TXTBASE breach included:

Email addresses
Cleartext passwords
Usernames
Website URLs associated with account credentials
Phone numbers

This comprehensive mix of credentials and related details significantly elevates the risk of misuse, particularly for accounts where users reused passwords or linked the same identifiers across multiple services.

Timeline of Key Events

February 2025: ALIEN TXTBASE’s massive trove of stealer logs is obtained from the Telegram channel and indexed by cybersecurity professionals.
February 15, 2025: The breach is publicly disclosed after further analysis confirms the volume and scope of the compromised data.

ALIEN TXTBASE Data Breach FAQ

What happened in the ALIEN TXTBASE breach?

The ALIEN TXTBASE data breach involved the release of over 23 billion stealer log entries from a Telegram channel, impacting hundreds of millions of unique online identities with detailed account credentials.

How many users were affected by the ALIEN TXTBASE data breach?

Nearly 284 million unique email addresses were part of the breach, but the total number of affected records exceeds 6.1 billion, with some accounts appearing multiple times due to repeated infections or usage.

What information was compromised in the ALIEN TXTBASE breach?

The breach exposed email addresses, passwords, usernames, website URLs, and phone numbers collected by stealer malware and distributed via Telegram.

When did the ALIEN TXTBASE breach take place?

The breach was reported in February 2025, with data believed to have been prepared and leaked around February 15, 2025.

How can I check if I'm in the ALIEN TXTBASE breach?

You can check if your information was part of the ALIEN TXTBASE breach by utilizing the DeHashed search engine.