Search Your Email: 367 Telegram Combolist Leak Exposed Passwords

A 367-Record Combolist Surfaces From a Telegram Upload

In May 2026, HEROIC analysts flagged a combolist file shared by a Telegram user containing 367 records. Each entry paired an email address with a plaintext password and, in many cases, a URL tied to the account the credentials belonged to. The file is dated May 13, 2026, and offers a clear look at how quickly small stolen-credential lists move through Telegram before spreading further across the dark web.

Why This Is Dangerous

Because the passwords in this file are stored in plaintext, no cracking or decryption is required. Anyone who gets a copy can immediately try each email and password pair against banking sites, email providers, social media, and shopping accounts. The included URLs make this even easier, since they point straight to the login page tied to each set of credentials, cutting out the guesswork.

What Was Exposed

• Email addresses
• Plaintext passwords
• URLs linked to the accounts

Why This Matters

Even a small leak like this one feeds larger criminal operations. Attackers load exposed email-and-password pairs into automated tools and run them against dozens of other websites, a technique known as credential stuffing. Because so many people reuse passwords across accounts, a single exposed combolist entry can lead to email takeover, financial fraud, or identity theft, even when the original leak was modest in size.

How Telegram Combolists Work

A combolist is simply a plain-text file of "combo" entries, usually an email or username paired with a password. Criminals build these lists by combining data from smaller breaches, phishing campaigns, or malware infections, then repackage and share them on Telegram channels and dark web forums. Because Telegram makes distribution fast and semi-anonymous, even small combolists like this 367-record file can end up copied, resold, and merged into larger criminal databases within days.

Check If You Are Affected

If you have ever reused a password across multiple sites, it is worth finding out whether your information appears in this leak or any other. HEROIC's free breach scanner checks your email against a database of more than 400 billion leaked records, including combolists like this one, so you can see your exposure and take action before criminals do.