WRTCLOUD Leak Hits 114 US Accounts With Plaintext Passwords

It's tempting to skim past a leak this small. On July 10, 2025, a file named "WRTCLOUD Success_Login WP" surfaced on Telegram with only 114 records in it, a number that barely registers next to the million-record dumps that make headlines. But every single one of those 114 people has just as much to lose as someone caught in a much bigger breach, and the file's name suggests the entries were specifically confirmed successful logins, not just guesses.

Why This Is Dangerous

Small, curated leaks like this one are sometimes more dangerous than massive ones, not less. A file with only 114 entries, all labeled "success," tells a buyer that every single record has already been checked and works. There's no wasted effort testing dead accounts, wich means whoever buys this list can move straight to exploitation instead of sorting through junk first.

What Was Exposed

• 114 confirmed login records tagged as successful at the time of capture
• The plaintext password saved alongside each account
• The web address where each login had been used

Why This Matters

All 114 records in this leak are tied to accounts based in the United States, which means the people affected are dealing with services, banks, and providers that assume a US user base and its typical security habits. If your password shows up here, don't asume a small leak means small consequences. The size of the file has nothing to do with how badly a stolen password can be misused.

How Stealer Logs Work

The "WP" in this file's name hints that at least some of the captured logins were tied to WordPress sites, a common target since so many small businesses and personal blogs run on it. Info-stealing malware sitting on an infected computer grabs saved credentials the moment the browser autofills a login form, then reports each successful capture back to whoever is running the operation, building exactly this kind of confirmed, ready-to-use list.

Check If You Are Affected

A leak of 114 records is easy to overlook, but it's just as easy to check. HEROIC's free scanner searches more than 400 billion leaked records, including small confirmed-login dumps like this one, so you can find out in under a minute whether your email and password made the list.