tuty_cloud: 77,462 U.S. Credentials From 1,050 Infected Devices
tuty_cloud 1050count: 73 Credentials Per Infected Device -- An Exceptionally High Yield
The "1050count" in tuty_cloud's package name tells a precise story: 1,050 infected devices contributed their credential stores to this release. With 77,462 total records from those 1,050 machines, the math works out to an average of approximately 73.8 credential sets per infected endpoint. That's an exceptionally high per-device yield -- most stealer log packages average far fewer records per compromised machine. It signals that tuty_cloud's malware specificly targeted heavily authenticated endpoints: work computers, frequent online shoppers, or users with large numbers of saved browser passwords.
tuty_cloud 1050count: Breach Summary
- Records Exposed: 77,462
- Data Types: Email addresses, plaintext passwords, target login URLs
- Breach Type: Infostealer malware log (1,050 PCS)
- Country Affected: United States
- Date Leaked: June 20, 2025
What High Yield Per Device Means
A device contributing 73+ credential sets to a stealer log package is a device with a lot of saved passwords. These are typically power users -- people who rely on their browser's password manager for dozens of accounts across banking, email, social media, shopping, and work platforms. For attackers, high-yield devices are gold: one infected machine provides an immediatly actionable dataset spanning the victim's entire digital life. Each URL in the log represents a platform the victim actively uses, making credential stuffing attacks that much more targeted and effectiv.
77,462 Records: A Top-Tier Release by Volume
At 77,462 records, tuty_cloud's 1050count package is among the larger individual stealer log releases in this database. Packages of this size can fuel sustained credential stuffing campaigns across multiple platforms for weeks. The June 2025 release date means these credentials were distributed less than a year ago -- recent enough that a significatly proportion of the passwords in this package are likely still active on the platforms identifed in the embedded URLs.
Check Your Exposure with HEROIC
HEROIC's free breach scanner searches more than 400 billion exposed records -- including high-volume packages like tuty_cloud's 1050count release from June 2025. If your email or password appeared across any of the 1,050 compromised devices in this collection, a free scan will surface it. Don't wait -- run a free search now.
Breach Breakdown
77,462 passwords exposed. Is yours one of them?
Enter your email to scan this breach plus 400B+ other leaked records. If you're compromised, we'll show you exactly where and what to change.
Free forever · No account required · Results in seconds