Infostealers Harvest 1.7 Billion Credentials in Six Months

Flashpoint reports infostealers harvested 1.7 billion credentials in the first half of 2026.

Threat intelligence firm Flashpoint found that infostealer malware was responsible for the theft of 1.7 billion credentials during the first half of 2026. The figure underscores the scale of commodity credential harvesting feeding downstream account takeover, fraud and ransomware operations.

• Flashpoint attributes 1.7 billion stolen credentials to infostealers in H1 2026
• Credential harvesting at scale drives follow-on account takeover and fraud risk
• Figure covers only the first six months of 2026