2026 Operation Endgame 4.0 — law-enforcement malware dataset; 4.2M emails to HIBP (Jun)
Data compromised
Email addresses recovered from malware/criminal infrastructure during Operation Endgame 4.0 law-enforcement action—not a single consumer website breach
Technical writeup
Law-enforcement notification dataset — June 2026. Have I Been Pwned added Operation Endgame 4.0 after international agencies disrupted criminal malware infrastructure used in ransomware kill chains, providing 4.2 million victim email addresses for public breach notification. This entry represents recovered stealer/malware victim data rather than a compromise of one named corporate service. Users should rotate passwords for any account tied to notified emails and enable MFA.
Root cause
International law-enforcement disruption recovered victim credentials from criminal malware infrastructure; emails provided to Have I Been Pwned for notification