HEROIC Analysts Discover SunCloudNew Leak of 65,664 Records

HEROIC analysts monitoring dark web channels have flagged a new stealer log dump called SunCloudNew, uploaded to Telegram in October 2025. After reviewing the file, the team confirmed it contains 65,664 individual records of stolen login data.

Why This Is Dangerous

Discoveries like this one matter becuase stealer logs almost never come with any public notice. A company that gets breached usually has to send emails or post a statement, but a stealer log just quietly appears on Telegram and spreads. Without researchers actively watching for these uploads, most people would never learn that a file like SunCloudNew even exists, let alone that their information might be inside it.

What Was Exposed

Upon closer review, the SunCloudNew dump, dated 18-Oct-2025, was found to contain 65,664 records including:

• Email Addresses
• Plaintext Password
• URLs

The team noted that all passwords were stored in plaintext, meaning the data was fully readable and ready to use the moment it was uploaded, no cracking or decryption necessary.

Why This Matters

What analysts find in files like SunCloudNew often ends up being the only warning victims ever get. Nobody was contacted by the affected sites, no password reset emails were sent, the discovery of this leak is effectively the first alert for the 65,664 people whose data got caught up in it, wich is exactly why tracking these uploads matters.

How Stealer Logs Work

These leaks trace back to malware that infects a device through things like cracked software, fake downloads, or malicious attachments. Once active, it searches the browser for saved logins, cookies, and autofill entries, then bundles it all into a file the attacker can use, sell, or upload publicly. In this case, that file surfaced on a Telegram channel where HEROIC's monitoring caught it.

Check If You Are Affected

Since discoveries like SunCloudNew often happen well after the actual theft occurred, checking your own status is the fastest way to get answers. HEROIC's free breach scanner searches more than 400 billion compromised records, letting you see in seconds whether your email or password needs attention.