The ‘110k Mix’ Combolist Leaked in July. It’s Public Now.

In July 2026, HEROIC analysts identified a combolist circulating in private Telegram channels under the name "110k Mix access." The file contained 92,899 individual records pairing email addresses with plaintext passwords and the website URLs they belong to, the kind of ready-to-use login list attackers trade to break into other people's accounts. Why this is dangerous: because the passwords in this file are stored in plaintext, anyone who downloads it can immediately try each email and password pair against popular websites and services, no cracking or decryption required. If any of the 92,899 people in this list reused the same password somewhere else, an attacker can walk straight into that account. What was exposed in the "110k Mix" combolist: email addresses, plaintext passwords, and the URLs of the sites or services each login belongs to. Why this matters: combolists like this one are the raw material for credential stuffing attacks, where automated tools test stolen email and password pairs against banks, email providers, and social media accounts at scale. Because the passwords here are plaintext, the barrier to abuse is low, and reused passwords are the single biggest reason these attacks succeed. Once inside an account, an attacker can reset other passwords, drain funds, or use the account to impersonate its owner. How a combolist like this one comes together: a combolist is a compiled file of usernames or email addresses paired with passwords, usually pulled together from older breaches, malware infections, or phishing campaigns and repackaged into one list. They're often uploaded to Telegram channels for free or sold cheaply, which is exactly what happened here: a Telegram user posted this file for other members to use or resell. Combolists don't always come from a single hacked company, they're frequently a patchwork of credentials collected from many different sources over time. Check if you are affected: if you think your email address could be part of the "110k Mix" combolist or any other leaked dataset, HEROIC's free breach scanner checks your information against a database of more than 400 billion leaked records. Run a free scan to see your exposure and get guidance on securing any accounts that may be at risk.