Dark Web Alert: ArtHouse Cloud Logs Leak 23,794 Passwords

In July 2026, dark web intelligence tracking picked up a stealer log file called "ArtHouse Cloud Logs v2" after it was uploaded to Telegram by an individual user. The file exposed 23,794 records, including email addresses, plaintext passwords, and the URLs of the accounts those credentials unlocked, all harvested from malware-infected devices.

What Dark Web Monitoring Found in ArtHouse Cloud Logs v2

The "v2" in the file name is a signal worth paying attention to. It means this is at least the second version of this particular log collection to circulate, which typically happens when a seller refreshes a stolen data set with newer infections or reposts it to reach new buyers on dark web forums and Telegram channels. ArtHouse Cloud is not a real company that was hacked. It is simply the label a threat actor gave to this batch of stolen logins.

What Was Exposed in This Data Set

• Email addresses
• Plaintext passwords
• URLs of the accounts those logins were used on

Why This Matters to You

Once a stealer log surfaces on the dark web, it rarely stays with just one buyer. Because these passwords were stored and leaked in plain, readable text, criminals can put them to use immediately, feeding them into automated credential stuffing tools that test the same login across banking, email, and shopping sites. If any password in this file matches one you still use, you are at risk of account takeover, financial fraud, or identity theft, especially if you reuse that password anywhere else.

How Logs Like ArtHouse Cloud Reach the Dark Web

Stealer malware infects a device through a malicious download, a cracked application, or a phishing link, then silently collects saved browser passwords, cookies, and autofill entries. The operator behind the malware gathers logs from many infected devices, packages them into a file, and distributes updated versions, like this v2 release, through dark web marketplaces and Telegram channels where buyers pay for fresh, working credentials.

Check If Your Credentials Are on the Dark Web

Waiting to find out the hard way is not a strategy. HEROIC's free breach scanner checks your email against more than 400 billion leaked records, including this ArtHouse Cloud Logs v2 data set, so you know immediately if your information has surfaced. If you find a match, change that password everywhere it was used and enable multi-factor authentication on your most important accounts.