US Accounts in ‘121x Hit By’ Leak: 121 Passwords Exposed

On 23 Apr 2026, a combolist called "121x Hit By" was uploaded to a Telegram channel, exposing 121 records that pair email addresses with plaintext passwords and the login URLs tied to each account. HEROIC analysts traced the exposure to United States-linked accounts.

Why This Is Dangerous

Because the passwords in "121x Hit By" are stored in plaintext, anyone who obtains the file can log into the affected accounts immediately. There is no encryption to break and no advanced skill required, just a copy-and-paste into the matching login page.

What Was Exposed

• Email addresses
• Plaintext passwords
• Associated login URLs

Why This Matters

For the 121 United States accounts exposed in this list, the risk extends well beyond the single login shown. Attackers use lists like this in credential-stuffing attacks, testing the same email and password against banks, retailers, and social platforms that are common in the US market. Reused passwords make it easy for one exposed account to turn into a wave of financial fraud and identity theft.

How "121x Hit By" Credentials Were Confirmed

The "Hit By" label suggests these 121 credentials were tested with an automated checker before being shared, meaning every login in the file was working at the time of the check. Combolists like this are usually built from a mix of older breaches, phishing pages, and malware logs, then filtered down to only the accounts confirmed to still be accessible.

Check If You Are Affected

If you hold a United States-based account with an email and password that could match this list, it is worth checking now rather than later. HEROIC's free breach scanner checks your email against more than 400 billion compromised records and tells you instantly if you were exposed in "121x Hit By" or any other leak. Run a free scan today.