ArtHouse Cloud Logs v1: 1,796 Records Exposed on Telegram

Every series has to start somewhere. ArtHouse Cloud Logs v1, uploaded April 27, 2026, is the opening entry in what turned out to be at least five numbered releases from the same source, and this first one alone contained 1,796 stolen email and password combinations.

Why This Is Dangerous

Version numbers in a filename are a warning sign in themselves. A "v1" tells you the people behind ArtHouse Cloud Logs planned on more releases before they even published the first one, meaning the 1,796 accounts here are just the begining of a much larger operation targeting infected devices over time.

What Was Exposed

• 1,796 email addresses paired with plaintext passwords
• URLs showing exactly which sites each stolen login unlocks
• The first documented batch in an ongoing ArtHouse Cloud Logs series

Why This Matters

Because this is a v1 release, later entries in the series climbed dramatically in size, some reaching well past a hundred thousand records. That growth pattern suggests the malware or botnet behind ArtHouse Cloud Logs was actively expanding its reach with each new version, a shift that occured gradually rather than overnight, catching more victims as time went on.

How a Versioned Stealer Log Series Grows

A numbered series like this typically starts small while an infostealer campaign is still spreading, then balloons as more devices get infected through phishing links, cracked downloads, or malicious ads. Each version represents a fresh export of whatever credentials accumulated since the last release, which explains why v1 looks modest next to its later counterparts.

Check If You Are Affected

Whether you show up in v1 or a later version of this series, the fix is the same, find out and change your passwords fast. HEROIC's free scanner covers over 400 billion breached records, including every version of ArtHouse Cloud Logs, so you don't have to guess wich file, if any, includes your information.