185494 UHQ Userpass SIXBOI: Passwords Leaked 2025, Now Public

A 2025 Combolist Resurfaces: 108,957 Logins Now Circulating

HEROIC analysts identified a combolist file labeled "185494 UHQ Userpass SIXBOI," uploaded to a Telegram channel and now tracked in our breach intelligence database. The file contains 108,957 records pairing email addresses with plaintext passwords and associated URLs. Our records show the underlying credentials were first leaked on 14 January 2025, meaning this data sat in circulation for well over a year before turning up in this specific dump.

Why This Is Dangerous

Because every password in this file is stored in plaintext, anyone who downloads it can use the credentials immediately, no cracking or decryption required. Combined with the associated URLs, an attacker can see exactly which site each email and password combination unlocks, then attempt to log in directly. If you reused that password anywhere else, the risk extends to every other account tied to it.

What Was Exposed

• Email addresses
• Plaintext passwords
• Associated login URLs

Why This Matters

Credential lists like this one are the raw fuel for credential stuffing attacks, where automated tools try the same email and password pair across hundreds of other websites. Because the passwords here are unencrypted, they work immediately in these attacks. If you have reused a password across multiple accounts, this single leak from 2025 could open the door to account takeover, identity theft, or financial fraud on services that have nothing to do with the original source of the data.

How a Combolist Like This Gets Built

A combolist is a compiled file of email or username and password pairs, usually assembled from older breaches, phishing campaigns, or malware logs and then repackaged for resale or free distribution on Telegram and dark web forums. The "185494 UHQ Userpass SIXBOI" file follows this pattern: it is not necessarily tied to a single hacked company, but a collection of working login pairs gathered and shared to help other criminals test accounts at scale.

Check If You Are Affected

If you used the same email address on any account between 2025 and now, it is worth checking whether your details appear in this or another leak. HEROIC's free breach scanner checks your email against more than 400 billion leaked records, including combolists like this one, and shows you immediately if you need to change a password.