The Ulpwrtcloud Free Log Has 180,175 Stolen Email and Password Pairs

HEROIC analysts identified this stealer log on July 14, 2026. The breach exposed 180,175 records, with stolen data including email addresses, plaintext passwords, and URLs. The source is identified as the ulpwrtcloud free stealer log.

Why This Is Dangerous

With 180,175 records shared freely on Telegram, this log is accessible to any criminal without cost or barrier. The free label indicates it was distributed openly to maximize reach, giving the widest possible audience access to 180,175 plaintext email and password pairs ready for immediate use.

What Was Exposed

• Email addresses
• Plaintext passwords
• URLs of associated login pages

Why This Matters

Freely distributed credential dumps spread faster and reach more criminals than paid ones. With 180,175 records, this log is large enough to fuel widespread credential stuffing campaigns across email, banking, and social media platforms, enabling account takeover, identity theft, and financial fraud at scale.

How This Stealer Log Works

Infostealer malware infects devices through fake software downloads, malicious ads, or cracked applications, then copies all browser-saved passwords, usernames, and site URLs without the user's knowledge. Collected data is aggregated into large logs and released on Telegram channels, sometimes for free to build a threat actor's reputation before paid releases.

Check If You Are Affected

HEROIC's free breach scanner searches 400 billion records including stealer logs like this one. Search your email now. Free, takes seconds.