8,165 Passwords Exposed in cvv190_cloud_4 Data Breach

8,165. That is how many records HEROIC analysts found inside a stealer log named cvv190_cloud_4, uploaded by a Telegram user on June 26, 2026. Each record pairs an email address with a plaintext password and the exact login URL it opens.

Why This Is Dangerous

Every single one of those 8,165 records is a working set of login credentials, not a guess or a leaked hash that needs cracking. An attacker can take any entry and log straight into the matching account today.

What Was Exposed

• Email addresses
• Plaintext passwords
• Login URLs (endpoints)

Why This Matters

Plaintext credentials at this scale are prime material for credential stuffing. Attackers run these combinations against major platforms automatically, and any victim who reuses a password faces real risk of account takeover, identity theft, and financial fraud.

How Stealer Logs Reach This Scale

Info-stealing malware spreads through cracked software, fake installers, and phishing links, then quietly pulls saved logins straight from the victim's browser. Each infected device contributes its own set of stolen credentials, and criminals combine thousands of these individual thefts into a single log like cvv190_cloud_4 before uploading it to Telegram for others to use or purchase.

Check If You Are Affected

With over 8,000 records in this single log alone, checking your exposure only takes a minuite of your time. HEROIC's free breach scanner searches more than 400 billion compromised records to tell you right away if your details were caught up in this leak.