The Ayankouji Private 529 Part 2 Leak Exposed 2,831 US Accounts

HEROIC analysts found a second stealer log in the same series, "AYANKOUJI PRIVATE 529 PART 2," uploaded to Telegram on July 1, 2026. This batch contains 2,831 records, each pairing an email address with a plaintext password and the login URL it works on. Like the first part of this series, the victims tracked back to United States based accounts, suggesting the person behind the malware is sorting infections by region before releasing them in smaller, more sellable batches.

Why Splitting the Ayankouji Private 529 Leak by Region Matters

When a stealer log is organized by country, it becomes more valuable to certain buyers, criminals targetting US banks, retailers, or social platforms can purchase just the records that matter to them seperately instead of sorting through a mixed international file. For the 2,831 people in this part of the dump, that means their credentials are sitting in a batch specifically curated for attackers who focus on US based fraud.

What Was Exposed in Ayankouji Private 529 Part 2

• Email addresses tied to US based accounts
• Plaintext passwords with no encryption
• The exact login URLs each credential unlocks

Why This Matters for US Consumers

A password leaked in plaintext gives an attacker a direct line into whatever account it protects, and when that data is organized by country it makes targeted credential stuffing against US banks, retailers, and email providers even easier. Anyone who resused a password from an account in this leak faces a real risk of identity theft, unauthorized purchases, or a drained bank balance, especially since the attacker already knows exactly where the login works.

How Multi Part Stealer Logs Like This One Get Made

Infostealer malware infects devices worldwide, then the operator behind it sorts the harvested data by country, platform, or value before splitting it into numbered parts like Part 1 and Part 2 of this Ayankouji series. Selling smaller, targeted batches rather than one giant file lets the seller charge a premium for cleaner, more relevant data to serious buyers on Telegram and dark web forums.

Check If You Are Affected by the Ayankouji Private 529 Part 2 Leak

If you are based in the United States and think your information could be part of this or a related batch, it is worth checking your exposure directly. HEROIC's free breach scanner searches more than 400 billion leaked records, so you can find out fast and change your passwords before anyone puts this data to use.