HEROIC Analysts Found SunCloudNew 1272 Leaking 7 Million Logins

SunCloudNew 1272 Combolist Exposes Over 7 Million Records

HEROIC analysts confirmed a combolist named "SunCloudNew 1272 - 9.42 M ULP" that was uploaded to a Telegram channel on July 22, 2026. While the file's own name claims 9.42 million lines, HEROIC's analysis identified 7,010,047 verified records pairing email addresses with plaintext passwords, each linked to a URL.

Why This Is Dangerous

At over 7 million records, this is one of the larger combolists HEROIC has reviewed. Because the passwords are stored in plaintext, an attacker does not need to crack anything, they can load the file straight into automated tools and start testing logins at scale. The sheer volume means this single file could affect millions of people who have no idea their credentials are circulating.

What Was Exposed

• Email addresses
• Plaintext passwords
• Associated URLs

Why This Matters

A file of this size is built for industrial-scale credential stuffing, where attackers run millions of stolen email and password pairs against websites automatically, looking for matches. If a password was reused across services, a single hit in this list could cascade into account takeover on other sites, followed by identity theft or financial fraud. With over 7 million records involved, the odds that any one person's credentials are safe simply because the list is large are not in their favor.

How ULP-Style Combolists Work

The "ULP" in this file's name stands for URL, Login, and Password, the standard format combolist traders use to package stolen credentials alongside the exact site they unlock. This structure makes the data instantly usable, an attacker does not have to guess which service a password belongs to. Files like "SunCloudNew 1272" are typically built by merging many smaller credential sources into one large ULP list before sharing it on Telegram channels.

Check If You Are Affected

With more than 7 million records in this leak alone, the odds of being included are far from negligible. HEROIC's free breach scanner checks your email against a database of more than 400 billion leaked records and tells you in seconds if you are exposed. Run a free scan now, and change any password tied to an account you find compromised.