← All coverage

t.me

Disclosed Sep 21, 2026

Records
1,952,268
Files
1
Added
Sep 22, 2026

A credential stuffing / stealer log compilation distributed via the 'White Cloud' Telegram channel. Contains approximately 1.9 million URL:login:password triplets harvested from infostealer malware across hundreds of different websites and services worldwide (Google, Facebook, PayPal, Netflix, Amazon, Spotify, Steam, and many others). No single target company — this is a multi-source aggregated stealer log dump.

Data found in this dataset

Email

Search this dataset

Team members search this dataset here and through the API. Access is by invitation from your team admin, or by request.

Source files

Expand any file to inspect its column headers and the field each maps to.

1.9M URL-LOGIN-PASS 21.09.2026 WHITE CLOUD.txt
2 columns1,952,268 rows

File structure

Source columnMapped fieldConfidence
1emailhigh
combo identifier column — values parse as email addresses
2passwordhigh
combo secret column — value adjacent to the email identifier

Notes: Heuristic auto-detection: credential combo list