2025 Operation Endgame 2.0 — law-enforcement malware disruption dataset; 15.4M victim emails to HIBP
Data compromised
Email addresses and passwords recovered from criminal infrastructure
Technical writeup
Have I Been Pwned added Operation Endgame 2.0 as a malware breach after law-enforcement agencies disrupted criminal infrastructure used in ransomware kill chains in May 2025. HIBP stated that law enforcement provided 15.3M victim email addresses for notification and a further 43.8M victim passwords for the Pwned Passwords service. This row is a law-enforcement recovery/notification dataset rather than a single breached consumer service.
Root cause
Malware-enabled credential theft recovered during international law-enforcement disruption