390,886 Gaming and Shopping Logins Leaked: PSN, Roblox Hit

Nearly 400,000 Gaming and Shopping Accounts Leaked

HEROIC analysts identified a large combo list titled "_400K_SHOPPING_PSN_UBISOFT_ROBLOX_HIGH_QUALITY_COMBO_" uploaded to Telegram on July 5, 2026. Despite the "400K" name, the verified file contains 390,886 records pairing email addresses with plaintext passwords and the login URLs for shopping and gaming platforms, including PlayStation Network, Ubisoft, and Roblox.

Why This Is Dangerous

Gaming and shopping accounts frequently have saved payment methods, purchase history, and in some cases stored gift card balances or in-game currency. With plaintext passwords already matched to the exact platform, attackers do not need to guess which service a login belongs to, they can log in directly and potentially spend, trade, or drain whatever value is tied to the account.

What Was Exposed

• Email addresses
• Plaintext passwords
• Login URLs for shopping and gaming platforms (including PSN, Ubisoft, and Roblox)

Why This Matters

At nearly 400,000 records, this list is large enough to fuel automated credential stuffing attacks at scale, where bots try each login across many services in rapid succession. Beyond the gaming and shopping accounts named in the file, reused passwords can open the door to account takeover on email, banking, and other unrelated services tied to the same person.

How High Quality Gaming Combo Lists Are Assembled

Lists labeled "high quality" have typically been checked by the seller to confirm the logins still work, often by testing them against the named platforms. The underlying data usually comes from information-stealing malware that harvests saved browser passwords, which are then sorted by platform, in this case shopping and gaming services, before being sold or shared to buyers looking for a specific type of account to exploit.

Check If You Are Affected

If you use PlayStation Network, Ubisoft, Roblox, or online shopping accounts, it is worth checking whether your login appears in this leak. HEROIC's free breach scanner searches more than 400 billion leaked records, including large combo lists like this one, so you can quickly confirm your exposure.