SunCloudNew Data Breach: 1.65 Million Passwords Leaked Online
HEROIC analysts verified a stealer log named "SunCloudNew 999" uploaded to Telegram on October 28, 2025. Though the uploader advertised the file as a 4.33 million line ULP dump, our team confirmed 1,653,264 genuine records of email addresses, plaintext passwords, and login URLs after filtering out duplicates and junk entries.
SunCloudNew Breach: Big Numbers, Bigger Risk to Real Accounts
Sellers often inflate stealer log listings to look more impressive than the data actually is. In this case, the real number, 1.65 million usable credential records, is still large enough to put a significant number of people at risk.
What matters most is not the marketing number attached to the file, but the fact that every one of those 1.65 million records represents a real email and password combination that may still be active today.
What Was Exposed
- Email addresses
- Plaintext passwords
- Associated login URLs
Why This Matters
Attackers do not need every line in a log to be legitimate. They only need one working password to trigger a chain reaction of credential stuffing across banking, email, and shopping accounts.
That chain reaction is how account takeover, financial fraud, and identity theft usually begin, often starting from a single password the victim thought was long forgotten.
How Stealer Log Breaches Work
Infostealer malware infects a device through phishing links, cracked software, or malicious downloads, then quietly harvests saved browser passwords and autofill fields. The stolen data is bundled into a raw log, which sellers frequently inflate in size before posting it, exactly as happened with SunCloudNew.
Buyers and researchers alike then have to sort through the noise to find the real, working credentials hidden inside.
Check If You Are Affected
Do not rely on guesswork to find out if you are one of the 1.65 million affected. HEROIC's free breach scanner checks your email against a database of over 400 billion compromised records, giving you a fast, reliable answer.
Breach Breakdown
1,653,264 passwords exposed. Is yours one of them?
Enter your email to scan this breach plus 400B+ other leaked records. If you're compromised, we'll show you exactly where and what to change.
Free forever · No account required · Results in seconds
/img/qr-code.png)