ArtHouse Cloud Logs Leak 192,515 Passwords Fueling Account Takeovers

HEROIC analysts identified a large stealer log titled "BIG PACK ArtHouse Cloud Logs TG ArhontCorp.part1," uploaded to a Telegram channel on August 12, 2026. The file contains 192,515 records made up of email addresses, plaintext passwords, and the URLs those credentials unlock.

The Chained Risk Behind This ArtHouse Leak

A leak of this size rarely stays contained to a single incident. Attackers merge files like this one into combolists used across many types of attacks, meaning a single reused password here can chain into logins for email, banking, and shopping accounts far beyond the original site.

What Was Exposed in the ArtHouse Cloud Logs

• Email addresses
• Plaintext passwords
• URLs tied to each set of credentials

Why This Matters

With over 192,000 credentials in plaintext, this log is exactly the kind of data set that powers large-scale credential stuffing campaigns. Each successful login can escalate into account takeover, identity theft, or financial fraud, especially where passwords are reused.

How This Stealer Log Was Likely Created

A file this large is typically compiled from many individual infostealer infections, bundled together and distributed as one release. The malware behind each infection harvests saved browser passwords and autofill data from an infected device before sending it back to whoever controls it.

Check If You Are Affected

HEROIC's breach intelligence database holds more than 400 billion compromised records, including large stealer logs like this one. Run a free scan to check whether your email address or password appears in this leak or any other breach on record.