
Breach registry
OperationEndgame2 Data Breach
Operation Endgame 2.0
What was exposed, when it happened, and which databases confirm it.
- accounts
- 15,436,844
- Breached
- May 23, 2025
- Last Update
- May 25, 2025
Were you caught in this breach?
Search your email, phone number or username against every record CheckLeaked indexes.
Your address never leaves this page: it is hashed in your browser and only a short fragment of that hash is sent.
What happened
In May 2025, a coalition of law enforcement agencies took down the criminal infrastructure behind the malware used to launch ransomware attacks in a new phase of "Operation Endgame". This followed the first Operation Endgame exercise a year earlier, with the latest action resulting in 15.3M victim email addresses being provided to HIBP by law enforcement. A further 43.8M victim passwords were also provided for HIBP's Pwned Passwords service.
Compromised Info
- Email addresses
- Passwords
Attestation
Four independent databases catalog this breach and they do not always agree. Each lane below is one source’s own count.
Sources & Link Methods
- HIBP
FAQ
What was leaked in the OperationEndgame2 breach?
The OperationEndgame2 breach exposed: Email addresses and Passwords.
When did the OperationEndgame2 breach happen?
The OperationEndgame2 breach was disclosed on May 23, 2025 and affected 15,436,844 records.
Am I affected by the OperationEndgame2 breach?
Search your email, phone or username at checkleaked.cc to find out whether your data appears in the OperationEndgame2 leak.