Who’s at Risk: 217 Wattpad Accounts Leaked in Stealer Log

217 Wattpad Accounts Turn Up in a Telegram Stealer Log

On December 13, 2022, HEROIC analysts found a stealer log file, labeled "217 Wattpad Accounts By white0storme," posted by a user on Telegram. The file contained 217 records, each pairing an email address with a plaintext password and the web address the login was used on. The naming and grouping suggest the file was specifically curated to target Wattpad users, a popular platform for reading and sharing original fiction.

Why This Is Dangerous

Because these passwords are stored in plaintext, anyone who gets hold of the file can log into the affected accounts immediately, with no cracking needed. For a platform like Wattpad, an attacker could take over an account to impersonate the writer, delete or alter published stories, or harvest any personal details left in profile settings or private messages. If the same password was reused elsewhere, the risk extends well beyond Wattpad itself.

What Was Exposed

• Email addresses
• Plaintext passwords
• Website login URLs tied to each credential

Why This Matters

Even accounts on platforms that seem lower risk than banking or shopping sites can create real exposure. A reused password on Wattpad can be tested against email providers or social media accounts belonging to the same person, since attackers routinely check whether a stolen credential unlocks other services too. What starts as a niche account takeover can quickly become a bigger identity or financial problem if password reuse is involved.

How Stealer Logs Work

This file was generated by infostealer malware, which infects a device through a malicious download, cracked software, or a phishing link, then quietly extracts saved logins from the victim's browser. After collecting the data, the malware sends it back to whoever controls it, who may then sort it by platform, as appears to have happened with these Wattpad accounts, before sharing or selling it through Telegram channels like this one.

Check If You Are Affected

If you have a Wattpad account, or reuse passwords across multiple platforms, it is worth checking your exposure. HEROIC's free breach scanner searches more than 400 billion leaked records, including stealer logs like this one, to show you if your email address has appeared anywhere it shouldn't. Run a free scan, and if you find a match, change that password immediately and turn on multi-factor authentication wherever it is available.