ArtHouse Cloud Logs v1: 65,115 Records Leaked Online

In June 2026, HEROIC analysts uncovered a fresh stealer log dump on Telegram called "ArtHouse Cloud Logs v1." A single user uploaded the file, which contained 65,115 exposed records pulled straight from malware-infected computers, including email addresses, plaintext passwords, and the URLs of the sites those logins belong to.

Why This Is Dangerous

Every password in this dump is stored in plaintext, meaning there is no encryption standing between an attacker and your account. Anyone who gets their hands on this file can copy and paste your credentials directly into a login page and gain instant access.

What Was Exposed

• Email addresses
• Plaintext passwords
• URLs of the associated login pages

Why This Matters

With 65,115 ready-to-use logins in circulation, this data is a goldmine for credential stuffing. Attackers run automated tools that test these email and password pairs against banking apps, retail accounts, and email providers. Anyone who has reused a password becomes a prime candidate for account takeover, identity theft, or outright financial fraud.

How Stealer Logs Work

Stealer malware hides inside pirated software, fake downloads, or malicious email attachments. Once it infects a device, it quietly harvests everything stored in the browser: saved passwords, autofil data, cookies, and even cryptocurrency wallet details. The stolen information is bundled into a single "log" file, which the attacker then sells or leaks for free on Telegram channels to build reputaton in underground forums.

Check If You Are Affected

Do not wait to find out the hard way. Run a free scan on HEROIC's breach checker, which cross-references your email against a database of more than 400 billion leaked records, to see immediately if your information is part of this or any other exposure.