Back to Radar
OP

Operation Endgame 2.0

High

In May 2025, law enforcement dismantled ransomware infrastructure in Operation Endgame 2.0, revealing email and password records.

Records exposed
15,436,844 records
Breach date
Breach May 23, 2025
Last update
Updated May 25, 2025

What data was exposed?

Fields reported as compromised in this breach record.

Email addressesPasswords

Why does this breach matter?

In-depth analysis of the breach and its implications.

In May 2025, law enforcement agencies globally collaborated to dismantle the infrastructure enabling ransomware attacks, in the operation known as Endgame 2.0. As part of the investigation, data belonging to over 15 million victims was consequently secured, including email addresses and passwords, and made accessible for analysis and heightened awareness through HaveIBeenPwned.

Impact Analysis

Understanding the scope and consequences of this breach.

User Impact
Users may face account vulnerability to unauthorized access due to credentials exposure.
Business Impact
Organizations must ensure enhanced security measures to mitigate potential unauthorized access to internal systems.
Affected Sectors
  • General individuals
  • Corporate accounts
Geographic Impact
  • Global

What You Should Do

Recommended actions to take in response to this breach.

If You Were Affected

  • Immediately change passwords for affected accounts.
  • Enable two-factor authentication on all email accounts.
  • Scan systems for unauthorized access or changes.

Preventive Measures

  • Use unique passwords across services.
  • Regularly update account credentials.
  • Employ advanced monitoring to detect unauthorized use of credentials.

Frequently Asked Questions

Common questions about this breach and what it means for you.

Your credentials may have been obtained through malicious activities linked to malware prior to the takedown.