HEROIC Analysts Flag 14M-Record Acolyte Bases Telegram Leak

HEROIC analysts flagged a massive stealer log called Acolyte Bases after it appeared on Telegram in late April 2026. The number attached to it is hard to look past: 14,023,173 individual records, making this one of the larger dumps our team has reviewed this year.

Why This Is Dangerous

Fourteen million records isn't just a big number for a headline, it represents fourteen million chances for something to go wrong for real people. At this scale, attackers don't even need to target anyone specific. They can run automated scripts that test every email and password pair against banking sites, email providers, and shopping accounts, and simply wait to see wich ones still work.

What Was Exposed

• 14,023,173 total records
• Email addresses
• Plaintext passwords
• URLs tied to each login

Why This Matters

Because Acolyte Bases is so large, it almost definately touches accounts that have nothing to do with each other, from personal email to work logins to random shopping sites. If even one of your passwords shows up here and you have reused it anywhere else, the exposure spreads far past the original account.

How Stealer Logs Work

Bases like this one are compiled over time, often stitched together from multiple smaller infections rather than a single hack. Malware sits on infected computers collecting saved logins bit by bit, and periodically someone gathers those scattered files into one giant "base" before releasing or selling it. The result is a single leak that actually represents thousands of seperate infections all bundled together.

Check If You Are Affected

With a leak this size, checking your exposure only takes a minute. HEROIC's free breach scanner cross references your email against more than 400 billion leaked records, including entries from Acolyte Bases, so you know exactly which passwords to change right away.