# Weekly credential indexing report (2026-09-07 to 2026-09-14)

[Weekly credential indexing report (2026-09-07 to 2026-09-14)](https://leakradar.io/en/blog/weekly-data-breach-stats-2026-09-07-2026-09-14)

Published: 2026-09-14T00:51:50.528Z

Content language: en

16,529,417 credential records indexed from 2026-09-07 to 2026-09-14 UTC. Dataset scope and counting methodology included.

Reporting period: 2026-09-07 to 2026-09-14 (UTC, end exclusive). These are indexing dates, not dates of intrusions.

## Indexing volume

-   16,529,417 Stealer Log credential records indexed.
-   8,363,376,471 raw lines in non-duplicate files indexed across raw-file categories.

Records do not represent unique people, valid accounts or newly breached servers. Raw files are deduplicated at file level; individual lines may repeat. These totals have different scopes and must not be added.

Domain examples below are selected from up to 100 leading aggregation candidates per field, filtered using the bundled Public Suffix List. Up to 10 valid registrable domains are shown per section. Invalid domains, protocols and app identifiers are excluded. This is not a global ranking of attacks. Distributed terms aggregation counts may be approximate. URL and email groups can overlap.

## URL domains

1.  `facebook.com`: **415,556** records
2.  `google.com`: **393,217** records
3.  `roblox.com`: **332,279** records
4.  `gmail.com`: **328,837** records
5.  `instagram.com`: **232,105** records
6.  `live.com`: **223,497** records
7.  `t.me`: **136,145** records
8.  `amazon.com`: **130,703** records
9.  `netflix.com`: **130,323** records
10.  `paypal.com`: **99,134** records

## Email domains

1.  `gmail.com`: **4,331,496** records
2.  `hotmail.com`: **406,086** records
3.  `yahoo.com`: **160,010** records
4.  `outlook.com`: **80,266** records
5.  `hotmail.fr`: **29,245** records
6.  `icloud.com`: **23,771** records
7.  `live.com`: **19,044** records
8.  `mail.ru`: **13,862** records
9.  `qq.com`: **13,708** records
10.  `yahoo.fr`: **13,213** records

[Data methodology](https://leakradar.io/en/methodology) · [Domain reports](https://leakradar.io/en/domain-reports)