1.43 Million Credentials Leaked in the ‘1.5M Corp Combo’ Stealer Log

In February 2025, a Telegram user uploaded a combolist file named 1.5M Corp Combo, exposing 1,431,287 records made up of email addresses, plaintext passwords, and the URLs each login was tied to. Despite the name, this is a stealer-log compilation, not a breach of any single company's own systems.

Why the 1.5M Corp Combo Leak Is Dangerous

A combolist of this size turns a handful of infected devices into a massive, ready-made attack list. With over 1.4 million working email and password pairs in one file, criminals do not need to guess who to target, they simply run the entire list against popular login pages and see what sticks. The scale alone makes this one of the more consequential stealer logs to surface recently.

What Was Exposed in the Corp Combo File

• Email Addresses - 1.43 million unique account identifiers
• Plaintext Passwords - stored in fully readable form, no hashing or encryption
• URLs - the specific login pages each credential pair was captured from

Why This Matters if Your Email Is in the Combo

Plaintext passwords at this scale are a credential-stuffing goldmine. Automated bots can test all 1.4 million pairs against banks, email providers, and shopping sites within minutes. Anyone who reused a password across multiple accounts is at direct risk of account takeover, and once one account falls, attackers often pivot into identity theft and financial fraud using the personal details found inside.

How a Combolist Like This Gets Built

Combolists like 1.5M Corp Combo are usually assembled by merging multiple smaller stealer logs, each pulled from malware-infected devices, into one large file. The "corp" naming suggests the seller marketed it as targeting corporate or business logins specifically, a common tactic to make a combolist more attractive to buyers looking for access to company accounts.

Check If You Are Affected

With over 1.4 million credentials in this single file, the odds that your email address is included are real. HEROIC's free breach scanner checks your email against more than 400 billion exposed records, including combolists like this one, so you can see your exposure instantly and change any reused passwords before they are used against you.