122,655 Passwords Surface in the SunCloudNew 1650 Stealer Leak

122,655. That's how many records showed up in SunCloudNew 1650 - 362 M ULP when it was posted to Telegram on March 16, 2026, the latest in a long running series of stealer logs that keeps adding new victims to the pile.

Why This Is Dangerous

Numbers like 122,655 can start to feel routine after seeing the SunCloudNew name attached to leak after leak, but routine doesn't mean safe. Each new file represents a fresh batch of infected devices and a fresh batch of people whose emails, passwords, and account URLs are now sitting in the open.

What Was Exposed

• Email addresses tied to each infected device
• Plaintext passwords with no encryption
• URLs identifying which accounts and services were accessed

Why This Matters

Looking back across this entire series of SunCloudNew uploads, one thing stands out: the pattern doesn't seem to be slowing down. Every new file, including this one with 122,655 records, adds more exposed credentials into circulation, and reused passwords mean the real damage often extends well beyond the original count, making a full password refresh neccessary for anyone caught up in this series.

How Stealer Logs Work

Every file in this series follows the same basic process. Malware quietly infects a device, harvests saved passwords and autofill data straight from the browser, and ships it back to an attacker who might recieve dozens of similar files before choosing which ones to release, then compiles and names the result, in this case SunCloudNew 1650, before releasing it to Telegram like all the ones before it. It's a repeatable operation, wich is exactly why the uploads keep coming.

Check If You Are Affected

With a series this long, the odds that your information appears somewhere across these files only grows. HEROIC's free scanner searches over 400 billion breached and leaked records, covering stealer logs like SunCloudNew 1650 and every related upload, so you can finally check your exposure and stop wondering.