Your Valorant or LoL Login May Be in the 1.2KK Gaming Leak

HEROIC analysts found a large combolist labeled "1.2KK Gaming Userpass - Valorant - lol - other games" shared by a Telegram user, tied to a leak date around January 2023. The file contains 913,458 records pairing email addresses with plaintext passwords and the URLs each credential was used on, with the labeling indicating a focus on gaming accounts including Valorant and League of Legends. Why this is dangerous: because the passwords are stored in plaintext, anyone who obtains this file can attempt to log in to these gaming accounts right away, with no cracking or decryption required. With over 900,000 records, this gives attackers a very large pool of working credentials to try across gaming platforms and beyond. What was exposed: email addresses, plaintext passwords, and associated URLs indicating which platform each credential was tied to. Why this matters: gaming accounts frequently have linked payment methods, in-game purchases, and connected email addresses. If any of these 913,458 people reused their password on other sites, attackers could use the same credentials to break into email, banking, or other gaming accounts through credential stuffing, which can lead to financial fraud or identity theft. How combolists like this one work: a combolist bundles usernames or email addresses with passwords, typically gathered from earlier breaches, malware infections, or manual scraping, and in this case labeled by the games it targets before being shared or sold on Telegram channels and dark web forums. Because the credentials are already organized by platform, they let attackers automate large-scale login attempts against specific games or services. Check if you are affected: if you play Valorant, League of Legends, or other online games, it is worth checking whether your account information appears in this leak. HEROIC's free breach scanner checks your email address against a database of more than 400 billion leaked records so you can quickly find out and take action if needed.