100k uHQ AOL Combolist: 94,493 Passwords Exposed. Yours Might Be One.

HEROIC analysts identified this stealer log on 17-Mar-2023. The breach exposed 94,493 records, with stolen data including email addresses, plaintext passwords, and URLs. The source is identified as 100k uHQ AOL.com combolist uploaded by a Telegram User.

Why This Is Dangerous

This combolist targets AOL email accounts and contains plaintext passwords, meaning there is no additional work required for an attacker to start attempting logins. UHQ indicates the credentials were selected for quality, so these are not random or expired entries but confirmed, usable account information. AOL accounts are still actively used by millions of people, many of whom have linked them to other services.

What Was Exposed

• Email Addresses
• Plaintext Passwords
• URLs

Why This Matters

AOL accounts are often used as backup email addresses linked to banking, healthcare, and government portals. A compromised AOL account can allow criminals to intercept password reset messages and gain access to accounts the victim does not even realize are linked to their old email address. This creates serious risks of identity theft, financial fraud, and unauthorized access to sensitive records.

How Stealer Logs Work

Stealer logs are created by malware that silently infects computers through phishing emails, malicious software downloads, or compromised browser extensions. The malware captures passwords saved in browsers, records login credentials as they are typed, and notes which websites the user visits. Criminals compile, sort, and verify these records before distributing them as combolists through private Telegram channels and dark web forums.

Check If You Are Affected

HEROIC offers a free breach scanner that searches 400 billion records. Search your email address now to find out if your credentials appear in this breach or others. Free, takes seconds.