Breach Intelligence Report 22 May 2026

91,618 Records Leaked in Free ‘VIP_ULP’ Telegram Data Dump

HEROIC
HEROIC Threat Intelligence Team
Email Addresses Plaintext Password Urls
Stealer Logs VIP_ULP Free uploaded by a Telegram User
Your email may be in this breach. Check in 5 seconds — free, no signup required.
Scan Email →
Records Exposed 91,618
Source Type Stealer log
Origin United States
Password Type plaintext

91,618. That is the exact number of records dumped for free when a Telegram user uploaded "VIP_ULP Free" on 12-May-2026. Despite the "free" label, everyone inside that file is paying a real price with their exposed credentials.


Why This Is Dangerous

Calling a leak "free" is a marketing move by the uploader, not a sign that the data is any less dangerous. These 91,618 records include plaintext passwords and matching URLs, so anyone who downloads the file gets a ready to use list of working logins with zero effort required.


What Was Exposed

  • 91,618 individual records
  • Email Addresses
  • Plaintext Password
  • URLs for each account

Why This Matters

Free leaks tend to spread faster than paid ones because there is no barrier stopping people from grabbing a copy. Within hours of a "free" tag going up, a file like this one can be downloaded thousands of times, wich means the 91,618 people inside it are exposed to a much wider pool of attackers than a private, paid sale would create.


How Stealer Logs Work

ULP dumps like "VIP_ULP" are built by sorting stolen credentials into a simple format of URL, login and password so buyers, or in this case anyone at all, can use them right away. The underlying data still comes from malware infecting individual devices and quietly copying saved browser passwords befor sending them off to the operator.


Check If You Are Affected

A free leak is not a small leak, it is often a widely shared one. HEROIC's free breach scanner checks your email against more than 400 billion compromised records, so you can find out quickly whether you are one of the 91,618 people affected here.

Breach Breakdown

Domain VIP_ULP Free uploaded by a Telegram User
Leaked Data Email Addresses,Plaintext Password,URLs
Password Types plaintext
Date Leaked 22 May 2026
Check in 5 seconds

91,618 passwords exposed. Is yours one of them?

Enter your email to scan this breach plus 400B+ other leaked records. If you're compromised, we'll show you exactly where and what to change.

All information submitted is Private and Secure. We do not sell or share email addresses. By searching, you agree to HEROIC's Privacy Policy and Terms of Service.

Free forever · No account required · Results in seconds

Private & Secure No Account Needed 3,664 scanned today
Breach Rank #N/A by affected users
Impact Score
4
sensitivity + scale + recency
Est. Financial Impact $662.9K fraud, phishing & misuse risk
Scan your email Free →
Scan to sign up

Scan to sign up instantly

24/7 Dark Web Monitoring
Instant Breach Alerts
Secure Data Protection
Your Data is at Risk

Your Personal Information is Exposed

We found your data exposed in multiple breaches. This includes:

  • Email addresses
  • Passwords
  • Phone numbers
  • Financial information
Secure My Information Now

Your information is protected by enterprise-grade security

Your Breach Details

Date:
Severity:
Records Exposed:

Your Exposed Information

Your Risk Level

How This Affects You

Full Breach Details

Premium Insights

Unlock Critical Security Information

Create a free account to access:

  • Full Breach Impact Analysis
  • Identity Theft Risk Score
  • Exposed Credentials Details
  • Personalized Security Recommendations
Create Free Account

Identity Theft Risk Score

Risk Score: 8.7/10 - Critical

Data Exposure Analysis

Passwords Critical
Financial High
Personal Medium
Social High
Security Critical

Breach Timeline Analysis

March 2024 Multiple credentials exposed in recent data breach
January 2024 Password found in dark web marketplace
December 2023 Personal information leaked in major security incident

Security Recommendations

High Priority
Password Security

Critical: Change compromised passwords immediately and enable 2FA on all accounts

Important
Financial Protection

Monitor credit reports and set up fraud alerts with major credit bureaus

Recommended
Identity Protection

Enable advanced identity monitoring and dark web surveillance