Hackers Are Using ArtHouse Cloud Logs v1 to Break Into Accounts

HEROIC found the ArtHouse Cloud Logs v1 stealer log on April 18, 2026, exposing 64,112 records containing email addresses, plaintext passwords, and URLs.

Why the ArtHouse Cloud Logs v1 Breach Is Dangerous

With 64,112 email-and-password pairs in plaintext, ArtHouse Cloud Logs v1 is an industrial-scale credential theft operation. Attackers who acquired this dataset can immediately run credential stuffing campaigns against banking platforms, email providers, and enterprise software systems. The login URLs bundled with each record make it trivial to identify which services each victim was using, allowing attackers to prioritize high-value targets and maximize financial damage.

What Was Exposed in the ArtHouse Cloud Logs v1 Leak

• Email Addresses -- 64,112 account identifiers enabling targeted attacks
• Plaintext Passwords -- working credentials requiring zero decryption effort
• URLs -- login endpoints revealing each victim's active online services

Why This ArtHouse Cloud Logs v1 Data Puts You at Risk

A breach of this magnitude means that if your email-password pair is included, it has almost certainly been tested against major platforms already. Successful logins give attackers access to your primary email inbox, which functions as a master key -- they can reset passwords on financial accounts, intercept two-factor authentication codes, and lock you out of every service tied to that address. Credential stuffing at scale produces results quickly, often within minutes of a log being acquired.

How Stealer Logs Work

Stealer malware is installed on victims' devices through phishing emails, pirated software, or malicious browser extensions. It silently captures saved browser passwords and login URLs, then exports the data to remote servers. The raw output is processed into clean logs like ArtHouse Cloud Logs v1 and distributed on Telegram, where tens of thousands of threat actors can purchase or download it for credential stuffing and account takeover campaigns.

Check If Your Data Was Exposed

HEROIC operates one of the world's largest breach databases, covering more than 400 billion leaked records. Use HEROIC's free breach scanner to check if your email address or credentials appeared in the ArtHouse Cloud Logs v1 leak or thousands of other breaches in our database.