Check Now: SunCloudNew Part03 Leaked 27,546 Passwords Free

SunCloudNew part03 joined the growing series on Telegram June 9, 2026, adding 27,546 more stolen logins to what is now a sprawling multi-file leak.

Why This Is Dangerous

Part03 sits in the middle of the ten-file SunCloudNew release, meaning it likely shares infected victims with several of the other numbered files. Every password inside is stored in plain text.

What Was Exposed

• Email addresses (27,546 unique accounts)
• Plaintext passwords with no encryption
• URLs tied to each compromised service

Why This Matters

With multiple parts of the same campaign now public, your credentials could appear more than once across different files, sometimes with updated passwords if the malware stayed on a device for a while. Checking one file and assuming you're clear isn't enough.

How Stealer Logs Work

As with the rest of the SunCloudNew series, this data comes from stealer malware that quietly copies saved browser passwords and reports back to whoever controls the infection. Numbered parts like part03 usually reflect batches collected on different days or from different sub-groups of infected devices, wich makes tracking the full scope difficult for researchers.

Check If You Are Affected

HEROIC's free scanner checks against more than 400 billion (400B+) leaked records, including every SunCloudNew part released so far. Run the check now, and don't asume that because one part didn't have your email, none of the others do either.