359,004 Records Exposed in the mansory1 Data Leak, Check Now

359,004 Records Exposed in the mansory1 Stealer Log

HEROIC analysts identified a large stealer log file named mansory1, uploaded by a Telegram user on 25 July 2026. The file contained 359,004 records taken from infected devices, including email addresses, plaintext passwords, and the URLs of the sites those credentials were used on.

Why the mansory1 Leak Is Dangerous

A file of this size turns a single upload into a mass credential dump. Because the passwords are stored in plaintext, anyone who gets the file can read a working login straight off the page without cracking or guessing anything. Each entry also lists the exact URL the credentials came from, so attackers can go directly to the right login page for hundreds of thousands of accounts at once.

What Was Exposed

• Email addresses
• Plaintext passwords
• URLs of the sites the credentials were captured from

Why This Matters

With 359,004 records in one file, this leak is exactly the kind of data set attackers use for large-scale credential stuffing, running huge batches of email and password combinations against popular websites to see which ones still work. If your login is one of them and you have reused that password anywhere else, an attacker who cracks one account can move quickly into others through account takeover.

How Stealer Logs Work

Stealer logs are generated by malware that infects a device, often through pirated software, a fake crack, or a malicious link, and then quietly copies saved browser passwords, cookies, and autofill data. All of that stolen information is compiled into a single file, and large ones like this, covering hundreds of thousands of records, are typically pieced together from many infections before being shared on Telegram or sold to other criminals.

Check If You Are Affected

With over 359,000 records exposed, the odds that your information is in this file are real, so do not wait to check. HEROIC's free breach scanner searches your email against more than 400 billion leaked records, giving you an immediate answer so you can change any exposed passwords right away.