Search Your Email: The ArtHouse Cloud Logs Exposed 110,006 Accounts

In July 2026, HEROIC analysts identified a stealer log file circulating on Telegram called ArtHouse Cloud Logs New v1. The file contained 110,006 records pairing email addresses with plaintext passwords, along with the URLs of the sites those credentials were used to log into.

Why the ArtHouse Cloud Logs Leak Is Dangerous

Stealer logs like this one come directly from malware that ran on infected devices, capturing whatever passwords were typed or saved in a browser at the time of infection. Because the passwords here are stored in plaintext and matched to specific URLs, an attacker can log straight into each account without guessing or cracking anything.

What Was Exposed in ArtHouse Cloud Logs New v1

• Email addresses
• Plaintext passwords
• URLs linked to each set of credentials

Why This Matters for the 110,006 People Affected

A file this size gives attackers a large, ready made list for credential stuffing, account takeover, and identity theft. Because stealer logs capture live, currently working logins rather than old leaked passwords, the accounts inside are often still active, which makes them especially valuable to criminals looking to break into email, banking, or shopping accounts.

How Stealer Log Malware Like This Works

A stealer log is created by malware that infects a device and quietly harvests saved passwords, browser autofill data, and login sessions before sending everything back to the attacker. The stolen data is then organized into files, often named after the malware or the seller, and distributed through Telegram channels like the one where ArtHouse Cloud Logs New v1 surfaced. Because the malware captures whatever the victim was actually using at the time, these logs tend to include current, working credentials rather than outdated ones.

Check If You Are Affected

If you think your email address could be part of the ArtHouse Cloud Logs leak or any other stealer log, HEROIC's free breach scanner checks your information against a database of more than 400 billion exposed records. Search your email now to see if your credentials have appeared in this leak, and change your passwords immediately if you find a match.