The MetaCloudVipNew Breach Happened 10 Months Ago. Now It’s Public.

HEROIC found 14,923 stolen logins in the MetaCloudVipNew 300 PCS stealer log, uploaded to Telegram in September 2025. That was ten montths ago. The data has been available to anyone who wanted it for the better part of a year, and the plaintext passwords inside are almost certainly still working on accounts that have not been updated since then.

Why the MetaCloudVipNew Breach Is Dangerous

Ten months is a long preiod of time for stolen credentials to remain in circulation. Most data breaches generate the highest risk in the first few weeks, when victims are unaware and passwords are still active. But a stealer log that has been online for nearly a year has been downloaded, shared, and potentially used by dozens or hundreds of different attackers during that time. The window of danger does not close until every password inside is changed.

What Was Exposed in the MetaCloudVipNew Leak

• Email addresses
• Plaintext passwords
• URLs showing which services each victim was logged in to

Why This MetaCloudVipNew Data Puts You at Risk

Because this log dates to September 2025, the loger it goes unchanged, the more people have had a chance to use it. An email and password pair from this file is still actionable against any account where the password was not reset. With 14,923 records, even a small percentage of still-active credentials represents hundreds of accounts at risk right now.

How Stealer Logs Work

Stealer malware collects passwords directly from infected browsers and sends them to an attacker's server. The data is compiled into a log file and shared online, typically through Telegram channels. These files often remain in circulation for months after they are first uploaded, giving multiple actors the opportunity to use the same stolen credentials against the same accounts.

Check If Your Data Was Exposed

HEROIC operates one of the world's largest breach databases, with billions of records indexed from stealer logs, data dumps, and dark web sources. Use the free search tool at HEROIC.com to check if your email appears in this or any other known breach.