Act Now: Centurion.txt Leak Exposes 13,974,980 Login Credentials

Act now: a second stealer log bearing the Centurion.txt name appeared on Telegram just one day after the first, this time dated April 30, 2026, and containing 13,974,980 exposed records of emails, plaintext passwords, and URLs.

Why This Is Dangerous

Two large dumps releasing back to back under a similar name suggests the source behind Centurion.txt is actively harvesting fresh credentials on an ongoing basis. That means the accounts inside this file are likely to still be active, giving attackers a narrow but real window to break in before passwords get changed.

What Was Exposed

• Email Addresses
• Plaintext Password
• URLs
• 13,974,980 total records exposed

Why This Matters

Urgency matters here because stolen credentials do not stay valuable forever, criminals move fast to use them before victims catch on and change their passwords. With almost 14 million records in this single file, the clock is ticking for everyone whose login shows up inside it, and waiting to act only gives attackers more time to try thier luck.

How Stealer Log Works

This type of leak comes from malware sitting on infected devices, quietly logging every website, username, and password entered by the user. The stolen data gets sent to the attacker, packaged into a file, and uploaded to Telegram, often just like the first Centurion.txt dump did the day before this one. Back to back releases like these suggest an active malware campaign rather than a one time incident.

Check If You Are Affected

Do not put this off. HEROIC's free breach scanner lets you check your email against a database of more than 400 billion compromised records right now, so you can find out immediatly if you were caught up in this leak and take action before an attacker beats you to it.