88,106 Plaintext Passwords Dumped in ArtHouse Cloud Leak

HEROIC identified a stealer log archive labeled premiumArtHouse Cloud Logs 65k.part02 shared on Telegram in July 2026. This collection contains 88,106 records of stolen credentials scraped from compromised devices by infostealer malware, leaving affected users vulnerable to immediate account hijacking.

The Real Cost of Plaintext Password Exposure

All passwords in this breach are stored in plaintext, exactly as victims originally typed them. There is no cryptographic protection to slow down attackers. Once exposed, these credentials can be used immediately without any decryption or cracking, giving criminals a direct path into victims' accounts within seconds of obtaining the data.

What Was Exposed

• Email Addresses — personal and professional accounts that serve as both login identifiers and phishing targets
• Plaintext Passwords — credentials captured in unencrypted form, immediately usable by attackers
• URLs — the exact websites and applications from which credentials were harvested

Credential Stuffing: Why One Leak Threatens All Your Accounts

Cybercriminals take stolen email-and-password combinations and feed them into automated tools that test logins across banking sites, social media platforms, email providers, and shopping portals simultaneously. Because so many people reuse passwords, a single stolen credential from this dump can unlock multiple accounts, turning one breach into a cascade of compromises.

Understanding Stealer Logs and Infostealer Malware

Stealer logs like this one originate from infostealer malware that quietly infiltrates devices through pirated software, fake downloads, or phishing links. Once installed, the malware silently harvests saved browser passwords, autofill data, session tokens, and browsing history. These stolen datasets are then packaged and distributed through Telegram channels and underground forums, making them accessible to a wide range of threat actors.

Check If Your Credentials Were Exposed

HEROIC maintains a breach database of over 400 billion records from known data leaks and stealer log collections. Use HEROIC's free breach scanner to check whether your email address or password appeared in this dump and take immediate steps to secure any compromised accounts.