Data Breach Watch logoDBW
    Technology
    High
    monitoring
    Updated 10 days ago

    Operation Endgame cybercrime infrastructure Data Breach

    Key takeaways

    • Reports suggest a potential breach involving Operation Endgame cybercrime infrastructure.
    • Discovered on November 25, 2025.
    • Possible data exposed: Email addresses, Passwords.
    • Confirmation level: Confirmed by regulators.

    Breach confirmed

    The Operation Endgame cybercrime infrastructure breach is confirmed. If you may be affected, add your details below and we will take it from there.

    Detailed summary

    Between November 10 and 13, 2025, an international law enforcement operation, Operation Endgame, coordinated from Europol's headquarters in The Hague, targeted major cybercrime infrastructure. The operation aimed at disrupting significant infostealers like Rhadamanthys, the Remote Access Trojan VenomRAT, and the Elysium botnet, all of which were instrumental in international cybercrime activities. Authorities successfully took down these enablers and, as a result, provided 2 million impacted email addresses and 7.4 million passwords to Have I Been Pwned (HIBP).

    The confirmed data types exposed in this incident are email addresses and passwords, affecting an estimated 2 million individuals. No other specific types of data, such as SSN, credit card information, or medical records, have been publicly disclosed as compromised directly from this operation. The full extent of data types handled by the disrupted infostealers is not directly equivalent to data exposed by this specific operation.

    Details can emerge later, and notices may be delayed.

    Data possibly involved

    • Email addresses
      Increases risk of phishing attacks and account takeovers
    • Passwords
      Attackers may try to access other accounts using the same credentials

    Breach Verification Status

    Reports Only

    Complete

    Initial dark web reports of potential breach

    Company Confirmed

    Complete

    Company has acknowledged the breach

    Regulator Confirmed

    Current

    Confirmed by regulatory authorities

    Note: Breach verification can take time. Information may evolve as more details become available from companies and regulators.

    Case Status:
    Monitoring

    We're monitoring this situation for developments.

    Were You Affected By This Breach?

    If you are a customer or have received a data breach notification, you may submit your information as part of our ongoing investigation. Submitting your information is free and does not obligate you.

    Were you in the Operation Endgame cybercrime infrastructure breach? Check your email

    Free scan against known breach datasets. Then remove your info from data-broker sites with Data Shield.

    No signup required. 30-second scan. Your email is only stored if you opt into alerts.

    Get your info off data-broker sites

    Data Shield files removal requests with every broker that accepts an authorized agent, and gives you the exact link or letter for the brokers that only accept requests from you.

    See how Data Shield works

    Check Your Risk Level

    Answer a few questions to understand how this breach might affect you

    What should I do?

    Change your passwords

    Update passwords for the affected service and any accounts using the same password

    Enable two-factor authentication

    Add an extra layer of security to your accounts

    Monitor your accounts

    Watch for suspicious activity on your financial and online accounts

    Watch for phishing attempts

    Be cautious of emails or messages claiming to be from the affected company

    Consider a credit freeze

    Prevent unauthorized access to your credit report

    Scan your email for other exposures

    Check whether this address shows up in other known breaches. Free, no account.

    Get your info off data-broker sites

    Data Shield files removal requests with every broker that accepts an authorized agent, and gives you the exact link or letter for the brokers that only accept requests from you.

    See how Data Shield works

    Got a notice about this breach?

    Paste it into BreachBrief to see exactly what data was exposed, how serious it is, and what to do next.

    Protect yourself

    Share This Breach Alert

    Help friends and family who might be affected by sharing this breach information

    Are you a law firm investigating this breach?

    Get qualified claimant leads delivered directly to your CRM.

    Related breaches

    Stay informed about breaches like this one

    We'll notify you when new data breaches are reported. Free, no spam. Unsubscribe anytime.

    Free, no spam. Unsubscribe anytime.