ArhontCorp Cloud Logs Part 2 Leak: 10,231 More Records Exposed

If part one of this series carried more than eighty thousand stolen records, part two, released the same day under the name Art House Cloud Logs TG ArhontCorp.part2- ScroogeUrl 1, looks almost small by comparison at 10,231 records. Almost. Ten thousand plus stolen logins is still roughly the size of a small town's entire population, all sitting exposed in a Telegram channel.

Why This Is Dangerous

Comparing the two parts side by side tells you something useful, this group isn't struggling to find victims, they are simply organizing an already massive haul into digestible chunks. A smaller file is often easier to search, sort, and resell in pieces, wich can actually make part two more attractive to certain buyers than the larger part one, even though it holds fewer records overall.

What Was Exposed

• Email addresses linked to each compromised account
• Passwords stored and shared in plain, unprotected text
• URLs pointing directly to the services those logins unlock

Why This Matters

Think of it this way, if part one felt like a flood, part two is more like a steady drip that keeps adding to the same puddle. Both parts came from the exact same operation, meaning anyone caught up in either release is dealing with the same underlying malware infection and the same level of risk, regardless of which file their data landed in.

How These Cloud Log Releases Work

Infostealer malware doesn't care how big or small the eventual leak file turns out to be, it just keeps harvesting saved passwords, autofill data, and cookies from whatever device it infects, usually delivered through a cracked download or fake installer. Operators then sort the stolen data into batches, sometimes releasing smaller ones like this to test buyer interest before dropping bigger files.

Check If You Are Affected

Whether your data landed in part one, part two, or somewhere else entirely, the only sure way to know is to check. HEROIC's free scanner searches more than 400 billion (400B+) leaked records, ArhontCorp releases included, and shows results imediately.