White Cloud Stealer Log Compilation 2026
Disclosed Sep 29, 2026
A stealer log compilation containing approximately 3.7 million URL:login:password credential triplets harvested from infected machines. The file aggregates credentials across hundreds of unrelated services (Google, LinkedIn, Roblox, Steam, Discord, Apple, TikTok, Facebook, etc.) worldwide. The 'WHITE CLOUD' label in the filename appears to be a threat-actor or distribution brand name for a credential log package, not a single breached entity. The date 29.09.2026 appears in the filename, likely indicating the compilation/release date.
Data found in this dataset
Search this dataset
Team members search this dataset here and through the API. Access is by invitation from your team admin, or by request.
Source files
Expand any file to inspect its column headers and the field each maps to.
3.7M URL-LOGIN-PASS 29.09.2026 WHITE CLOUD.txt3 columns3,709,777 rows
File structure
| Source column | Mapped field | Confidence |
|---|---|---|
| 0 | url | high |
| 1 | high | |
| 2 | password | high |
Notes: Standard URL:email:password combo list.