334 Records Stolen in USA1 Stealer Log — Are You Affected?

HEROIC analysts identified this stealer log on June 14, 2026. The breach exposed 334 records, with stolen data including email addresses, plaintext passwords, and URLs. The source is identified as USA1, a Telegram-uploaded credential file distributed by an anonymous user and confirmed circulating in private Telegram channels.

Why This Is Dangerous

Despite its small size, every one of the 334 records in this file contains a plaintext password ready to use without decryption. Each entry also includes the URL of the exact site that login belongs to, meaning an attacker can go directly to the right login page with the right credentials and take over the account immediately. Files like USA1 spread quickly on Telegram, reaching many potential attackers before victims are even aware their passwords were stolen.

What Was Exposed

• Email addresses
• Plaintext passwords
• URLs of the sites each login was captured from

Why This Matters

Even a small log of 334 records can cause serious harm if the exposed passwords were reused elsewhere. Attackers feed stolen credentials into automated tools that test the same email and password pair across banking sites, email providers, and shopping platforms, a technique called credential stuffing. Any reused password can turn this small stealer log into account takeover, identity theft, or financial fraud across multiple services.

How This Stealer Log Works

USA1 was built by infostealer malware, not by hacking any single company's servers. The malware infects a victim's computer through fake downloads, cracked software, or malicious attachments. Once installed, it copies every saved password and autofill entry from the browser and sends the data back to the attacker. Those stolen credentials are then compiled into a labeled file like USA1 and uploaded to Telegram for others to download and use.

Check If You Are Affected

HEROIC's free breach scanner searches 400 billion records. Search your email now. Free, takes seconds.