Hunter ULP Private Base Leak Exposed 1,276,740 Credentials

HUNTER_ULP PRIVATE NEW BASE 26-01-2026 6 sounds like a string of code, and in a way it is, it's a stealer log with 1,276,740 records that surfaced on Telegram in January 2026.

Why This Is Dangerous

Files with names like this often come from groups who release these dumps regularly, treating stolen credentials almost like a subscription product. That kind of steady supply means fresh, working logins keep entering circulation.

What Was Exposed

• Email Addresses
• Plaintext Password
• URLs tied to each login
• 1,276,740 total records

Why This Matters

Over 1.2 million plaintext passwords is alot of exposure for accounts that were never supposed to leave a person's own browser. Whoever grabs this file doesn't need any special skill, just a list of emails and passwords ready to try.

How Stealer Logs Work

Malware quietly infects a device, often through a fake crack or a bundled download, then copies saved usernames, passwords, and URLs straight from the browser's storage. Once the malware operator has collected enough, the data gets organized into a "base" file, wich is exactly what this 1,276,740 record dump is.

Check If You Are Affected

Don't leave it to chance. HEROIC's free breach scanner searches over 400 billion exposed records so you can immediately check if your email is part of this leak or any other.