diff --git a/monkey/common/events/stolen_credentials_event.py b/monkey/common/events/stolen_credentials_event.py
new file mode 100644
index 000000000..c9a03505a
--- /dev/null
+++ b/monkey/common/events/stolen_credentials_event.py
@@ -0,0 +1,18 @@
+from dataclasses import dataclass
+from typing import Sequence
+
+from common.credentials import Credentials
+
+from . import AbstractEvent
+
+
+@dataclass(frozen=True)
+class StolenCredentialsEvent(AbstractEvent):
+    """
+    An event that was initiated/observed when an agent collects credentials from the victim.
+
+    Attributes:
+        :param stolen_credentials: The credentials which were stolen by the source agent
+    """
+
+    stolen_credentials: Sequence[Credentials]
diff --git a/vulture_allowlist.py b/vulture_allowlist.py
index 29359dfe9..565cc258a 100644
--- a/vulture_allowlist.py
+++ b/vulture_allowlist.py
@@ -214,6 +214,9 @@ _make_simulation  # unused method (monkey/monkey_island/cc/models/simulation.py:
 AbstractEvent
 tags
 
+# TODO DELETE IN #2176
+StolenCredentialsEvent
+
 
 # TODO DELETE AFTER RESOURCE REFACTORING