The ARCEUSULP 158 Dump Put 228,176 Login Credentials on the Dark Web

"ARCEUSULP 158" Stealer Log Exposes 228,176 Records

HEROIC analysts identified a stealer log file labeled "ARCEUSULP 158" that surfaced on a Telegram channel on July 21, 2026. The file contained 228,176 records, including email addresses, plaintext passwords, and the URLs of the accounts those credentials unlock. The "ULP" in the name refers to the URL, login, and password format the data is organized in, a common structure for stealer logs traded on Telegram.

Why This Is Dangerous

This data was harvested directly from infected devices rather than pulled from a hacked company server, which is why the passwords in this file are stored in plaintext rather than hashed. Paired with the matching URL for each account, an attacker has more than 228,000 ready-to-use logins, each one already matched to the exact site it unlocks.

What Was Exposed

• Email addresses
• Plaintext passwords
• URLs of the accounts the credentials belong to

Why This Matters

With 228,176 records exposed, it is likely that a meaningful number of these people reused their password on other accounts. Attackers rely on that habit for credential stuffing, taking a leaked email and password pair and testing it against banking, email, and social media logins. That process can quickly lead to account takeover, identity theft, and financial fraud.

How Stealer Logs Work

A stealer log is created when malware, often hidden inside a cracked program, fake download, or malicious attachment, infects a device and quietly collects everything saved in the browser: usernames, passwords, autofill data, and browsing history. That data is packaged into a log file, labeled and numbered like "ARCEUSULP 158," and uploaded to Telegram channels where anyone can access it.

Check If You Are Affected

If you think your email might be part of this or any similar leak, HEROIC's free breach scanner checks your address against a database of more than 400 billion leaked records. It takes seconds to check and gives you a clear next step.