The 89K UHQ Combolist Contains Exactly 26,361 Login Pairs

In July 2026, HEROIC analysts identified a combolist file circulating on Telegram, labeled "89K UHQ Combolist - MIX" and uploaded by a Telegram user. Despite the name advertised by the uploader, the file contains exactly 26,361 records pairing email addresses with plaintext passwords and associated URLs.

Why the 89K UHQ Combolist Mix Is Dangerous

Every password in this file is stored in plaintext, so anyone who downloads it can read the credentials instantly with no cracking involved. Because the records are mixed from multiple sources and paired with the exact URLs the logins were used on, an attacker can quickly sort through them to find accounts that still work.

What Was Exposed

• Email addresses
• Plaintext passwords
• Associated URLs

Why This Matters

If your credentials are among the 26,361 exposed records, an attacker can attempt automated logins across other websites in minutes, a tactic known as credential stuffing. Because this file mixes accounts from several different sources, the range of platforms at risk is broader, increasing the chance of account takeover, identity theft, and financial fraud if a password was reused.

How Mixed UHQ Combolists Get Assembled

A combolist is a compiled file of email or username and password pairs, typically gathered from earlier breaches, phishing pages, or malware infections rather than one single incident. Sellers label lists as "UHQ," meaning ultra high quality, and "MIX" when the records come from several different combolists blended together, then advertise inflated record counts to attract buyers on Telegram.

Check If Your Credentials Are in This Leak

If you want to know whether your email address appears in this combolist or any other leaked dataset, HEROIC's free breach scanner checks your information against a database of more than 400 billion leaked records. It takes seconds to check, and if you find a match, changing that password everywhere you have reused it is the fastest way to shut the door on attackers.