1,633 French Logins Leaked, Search Your Email Now

A Combo List Aimed at French Accounts

HEROIC analysts found a file titled "FRANCE" uploaded to Telegram on May 16, 2026. It contains 1,633 records pairing email addresses with plaintext passwords and the URLs those logins were used on, grouped together specifically for a French-speaking audience.

Why This Is Dangerous

Grouping stolen logins by country or region, as this list does, makes it easier for attackers to run focused campaigns like phishing emails or credential stuffing attempts aimed at popular local services. Since the passwords are stored in plaintext and matched to specific URLs, no additional cracking is needed to use them.

What Was Exposed

• Email addresses
• Plaintext passwords
• Associated login URLs

Why This Matters

With over 1,600 confirmed logins in this file, the risk of credential stuffing and account takeover is real, especially for anyone who reuses the same password across multiple sites. A single leaked pair can be tried against email, banking, and shopping accounts until one of them works.

How Country-Specific Combo Lists Are Made

Sellers often sort stolen credentials by country to appeal to buyers running localized attacks, since a login tied to a specific region is more likely to match services and language patterns familiar to that audience. The credentials themselves typically originate from information-stealing malware logs collected from infected devices, then filtered by country before being shared or sold.

Check If You Are Affected

Rather than wondering whether your email is in this list, you can search it directly. HEROIC's free breach scanner checks your email against more than 400 billion leaked records, including regional combo lists like this one, so you know your status in seconds.