Between November 10 and 13, 2025, an international law enforcement operation, Operation Endgame, coordinated from Europol's headquarters in The Hague, targeted major cybercrime infrastructure. The operation aimed at disrupting significant infostealers like Rhadamanthys, the Remote Access Trojan VenomRAT, and the Elysium botnet, all of which were instrumental in international cybercrime activities. Authorities successfully took down these enablers and, as a result, provided 2 million impacted email addresses and 7.4 million passwords to Have I Been Pwned (HIBP).
The confirmed data types exposed in this incident are email addresses and passwords, affecting an estimated 2 million individuals. No other specific types of data, such as SSN, credit card information, or medical records, have been publicly disclosed as compromised directly from this operation. The full extent of data types handled by the disrupted infostealers is not directly equivalent to data exposed by this specific operation.
Details can emerge later, and notices may be delayed.