Between November 10 and 13, 2025, a multinational law enforcement operation dubbed "Operation Endgame" targeted cybercrime infrastructure, including infostealers like Rhadamanthys and botnets. This operation, coordinated from Europol's headquarters, disrupted criminal networks rather than being a data breach of a specific company. Authorities involved in the operation provided 2 million email addresses and 7.4 million passwords to Have I Been Pwned, which were credentials earlier obtained by the targeted criminal groups.
The primary focus of Operation Endgame was to take down cybercrime enablers and involved actions against 1025 servers across 11 countries, primarily in Europe. While the operation itself did not expose personal data, the credentials provided to HIBP indicate that previously compromised email addresses and passwords were in the possession of the criminal networks targeted. No personal, SSN, medical, or financial data exposure from affected individuals has been reported as a direct result of this anti-cybercrime effort.
Details can emerge later, and notices may be delayed.