MetaCloudVipNew Leak Leaves 2,298,092 LINE Users Facing Fraud Risk

The MetaCloudVipNew stealer log surfaced on Telegram on 31-Jan-2026, tied heavily to LINE accounts, and by the time it was verified it held 2,298,092 records. For everyone caught up in it, the consequences start the moment someone downloads the file.

Why This Is Dangerous

Victims of this leak now face a straightforward but serious problem: their saved passwords are sitting in plaintext, recieved by anyone who grabs the file, ready to be tried against LINE, email, and any other account that shares the same password.

What Was Exposed

• 2,298,092 total records
• Email Addresses
• Plaintext Passwords
• URLs, including many tied to LINE

Why This Matters

For someone affected by this leak, the fallout can mean locked accounts, unauthorized messages sent from thier LINE profile, or a drained account somewhere they never expected. The size of the file, over two million records, means these consequences are playing out for a lot of people at once, not just a handful.

How Stealer Logs Work

Stealer malware infects a device, often through a disguised app or download, then reads every password saved in the browser along with the site it belongs to. LINE credentials saved in browser extensions or web logins get swept up the same way as anything else, then bundled into a file and posted for sale or free download on Telegram.

Check If You Are Affected

If you use LINE or any of the accounts that might be tied to this leak, checking now can save you from dealing with the consequences later. HEROIC's free breach scanner searches more than 400 billion leaked records, this one included, so you know exactly where you stand.