1.5 Million leslipfrancais.fr Lingerie Customer Logins Leaked

HEROIC analysts found a combolist file uploaded to Telegram on August 23, 2026, containing 1,505,956 logins for leslipfrancais.fr, a French lingerie manufacturer's customer site, based on the file's own name. Each record pairs an email address with a plaintext password and the URL it unlocks. Scan your email to see if your address is among them.

With more than 1.5 million records in one file, this is a large pool for automated login attempts. Every password is stored as plain, readable text, so an attacker can try it immediately, and the attached URL tells them precisely where to use it first.

What This Combolist Contains

• Email Addresses: identifies the customer behind each login.
• Plaintext Password: readable and immediately usable, no cracking needed.
• URLs: shows exactly which site the credential was used on.

Reuse Is the Real Danger Here

Few people use a unique password for every shopping site they visit. If a password in this file matches one used on an email account, banking app, or workplace login, that other account is now at risk too, regardless of how small a role the original site played in someone's life.

How a Customer List Becomes a Combolist

A combolist is created by pulling together email and password pairs, often from a mix of sources, and organizing them into one file that can be tested against other websites. A file named after this site means it is a list of logins for leslipfrancais.fr, not confirmation that the company's own systems were broken into.

If You Shop at leslipfrancais.fr

Scan your email to check whether your address appears in this file. If it does, change your password on that site and anywhere else you used the same one, from a device you trust is clean. Check both personal and work email addresses, since either could be tied to an old order.