u/Fantastic_Duck2026

Really sorry if this isn’t quite the right subreddit to ask, or if it's a question without an answer. Suspect the real answer is it depends on what was taken? I’m recovering from a possible recent infostealer attack, but still really anxious about my data being out there (though it’s been a few weeks and am slowly starting to feel better. This subreddit and r/techsupport have been a HUGE help).

But when a hacker/criminal sells an infostealer log, does that tend to be a onetime deal, and then the log is discarded once any useful data is extracted? Or is it more the case that, once the log exists, it gets resold over and over, either by the original hacker or by whoever bought the log?

Again, sorry if there’s not a true answer to this (Google gave me kinda mixed results). Like I said though, it’s been a few weeks, yet I can’t shake the anxiety about what’s potentially happening to my data. So I'm interested in people’s thoughts on this -- I'm trying to educate myself as much as possible, and never wanna fall victim to something like this ever again!

Really sorry in advance if this is a dumb question/if there isn’t a real answer and I need to just live with it. Not great with this stuff. But am trying my hardest to understand.

Got a couple of critical security alerts on one of my Google accounts. Couldn’t find anything wrong until a strange new phone was added.

Panicked and deleted that account. Clean install of Windows. Changed every password from a safe device. I was convinced I must have downloaded a keylogger or something. (Lesson extremely learned about visiting sketchy rom sites, I was stupid)

It’s been about 2 weeks but still sick with worry that someone might have been in my other accounts. Or that they were screenshotting my laptop, and that my main google account -- which was the recovery email for the deleted account -- will start getting scammy blackmail emails.

But if something was going to happen, I figure it would have happened by now? Plus if there was really a keylogger or something similar, I dunno why only my least valuable email account would be targeted, and that they didn’t even change the password? It’s confusing??

Am I overthinking things? It wouldn’t be the first time. Again, not great with this stuff, so any advice/reassurance would be very appreciated