7 Weeks Later: Acolyte Bases Leak of 3,582,683 Still Active

It has been about seven weeks since a stealer log called "Acolyte Bases" first appeared on Telegram back on May 12, 2026, and the file is still making the rounds with 3,582,683 records inside it. Time hasn't slowed this leak down one bit.

Why This Is Dangerous

Seven weeks is plenty of time for a file this large to get copied into a seperate archive, reposted under a new name, or folded into a larger combolist. The longer a dump like this stays active, the more chances criminals have had to test the credentials inside it, sometimes imediately after it first went up.

What Was Exposed

• Email Addresses
• Plaintext Passwords
• URLs tied to each login
• 3,582,683 total records

Why This Matters

Anyone who assumes an older leak is no longer a threat is taking a real risk. Passwords don't expire on thier own, and if someone hasn't changed the one exposed in this file since May, it is likely still working right now, weeks after the initial discovery.

How Stealer Logs Work

This dump traces back to malware that infected devices over time, quietly collecting saved browser logins before exporting everything into one large file. Once uploaded, a log like "Acolyte Bases" doesn't just disappear, it keeps getting shared and re-shared across channels for weeks or months after its first appearance.

Check If You Are Affected

Whether this leak happened seven weeks ago or seven days ago, checking your exposure only takes a moment. HEROIC's free breach scanner searches more than 400 billion leaked records so you can confirm right now if your information is part of this ongoing leak.