Researchers Link the 125K Japan Mix Combolist to 119,865 Logins

"125K Japan Mix Fresh" Combolist Leaks 119,865 Login Credentials

HEROIC analysts identified a combolist titled "COMBOLIST 125K JAPAN MIX FRESH 100," uploaded by a Telegram user on 30 April 2026. The file contains 119,865 records, each pairing an email address with a plaintext password and the URL the credentials were used on.

Why This Is Dangerous

The file's own title advertises it as "fresh," meaning the seller is claiming these 119,865 credentials are recently gathered and likely still active. Because every password in the file is stored in plaintext, anyone who obtains a copy can read and use each login immediately, with no need to crack or decode anything.

What Was Exposed

• Email addresses
• Plaintext passwords
• URLs

Why This Matters

A combolist of this size gives attackers a large pool of working logins to test against banking sites, email providers, and social media platforms in a single automated run. For the 119,865 people whose credentials appear in this file, the danger isn't limited to whatever site the password was originally used on, any account that shares the same password is now at risk of takeover, and the exposed data can feed further identity theft or financial fraud.

How a "Mix" Combolist Like This Gets Assembled

The word "mix" in the title indicates that this file combines credentials pulled from several different sources rather than a single breach, likely a blend of stealer logs, older leaks, and phishing results. Sellers typically test each entry against live login pages before uploading, filtering out anything that no longer works, then post the finished, "fresh" file to Telegram channels where other buyers can purchase or use it directly.

Check If You Are Affected

With 119,865 records in circulation, checking your exposure only takes a minute. HEROIC's free breach scanner searches a database of more than 400 billion leaked records, so you can see whether your email and password appear in this leak or any other, and update your credentials before someone else does.