The 101k UHQ Germany Base Combo Leaked 99,099 Accounts Online

HEROIC analysts identified a combolist labeled "101k UHQ Germany base" that was uploaded to a Telegram channel on 28 February 2023. The file contains 99,099 records made up of email addresses, plaintext passwords, and the login URLs those credentials belong to.

Why This Is Dangerous

Labeled "UHQ," or ultra high quality, this combolist was marketed as a verified, working batch of nearly 100,000 email and password pairs, each matched to the exact site it logs into. That marketing matters to attackers, a list advertised as high quality is more likely to be used quickly and aggressively.

What Was Exposed

• Email addresses
• Plaintext passwords
• Login URLs for the associated accounts

Why This Matters

With 99,099 records in one file, this combolist gives attackers a large base of accounts to run through credential stuffing tools, testing each email and password pair against email providers, banking sites, and social platforms. Anyone whose credentials appear here is at risk of account takeover, especially if that password has been reused anywhere else.

How Combolists Work

A combolist pairs usernames or email addresses with passwords, one credential set per line, and is usually assembled from older leaks and stealer logs rather than pulled from a single company's breach. Combolists are sometimes organized or labeled by the region of the email domains they contain, as with this "Germany base" file, before being uploaded to Telegram channels for other users to test at scale.

Check If You Are Affected

To find out whether your email address or passwords appear in this combolist or any other leak, HEROIC's free breach scanner checks your information against a database of more than 400 billion leaked records in just a few seconds.