Search Your Email: ArtHouse Cloud Logs v2 Exposed 30,631 Accounts

In late July 2026, HEROIC analysts identified a stealer log named ArtHouse Cloud Logs v2 uploaded by a Telegram user. The file contained 30,631 records combining email addresses with plaintext passwords, along with the URLs each login was captured from. The data was verified as of July 29, 2026.

Why a Stealer Log of This Size Is Especially Risky

Unlike a list pulled together from old breach dumps, a stealer log like ArtHouse Cloud Logs v2 is captured directly from infected devices in real time, which means the passwords are almost always current and working. With over 30,000 records in plaintext, an attacker does not need to guess or crack anything. They can simply match each email to its password and the site it belongs to, then start logging in.

What Was Exposed in ArtHouse Cloud Logs v2

• Email addresses
• Plaintext passwords
• URLs identifying the login page for each account

Why This Matters

A stealer log of this scale gives criminals a ready-made list for credential stuffing, where automated tools try each email and password pair against banking sites, email providers, and shopping accounts. Because the credentials came straight from a live device rather than an old breach, the success rate for attackers tends to be higher, which raises the risk of account takeover, identity theft, and financial fraud for the 30,631 people in this file.

How Stealer Logs Like ArtHouse Cloud Logs v2 Are Created

Stealer logs come from malware quietly installed on a victim's computer or phone, often through a fake download, cracked software, or malicious attachment. Once running, the malware pulls saved passwords and autofill data straight out of the browser and sends them back to the attacker, along with the web address each credential belongs to. The result is a file like this one: real, working logins tied to the exact sites they unlock, packaged for quick resale on Telegram.

Check If You Are Affected

With more than 30,000 accounts exposed, the odds that your email is in this file are higher than with the smaller leaks HEROIC tracks. Our free breach scanner checks your email against a database of more than 400 billion leaked records, including this one, so you can find out in seconds and change any exposed passwords before someone else uses them.