Dark Web Intel: 1,032 Adelaide.edu.au Credentials in New Combolist

In June 2026, HEROIC analysts spotted a combolist labeled adelaide.edu.au circulating after being uploaded by a user on Telegram. The file contained 1,032 records made up of email addresses, plaintext passwords, and URLs tied to accounts associated with the adelaide.edu.au domain. Why This Is Dangerous: this combolist gives an attacker a direct list of working email and password combinations tied to a single organization's domain. Because the passwords are stored in plaintext, there is no encryption to break, so anyone who obtains the file can attempt to log in immediately. What Was Exposed: the file contains email addresses on the adelaide.edu.au domain, plaintext passwords tied to each address, and URLs showing where the credentials were used. Why This Matters: even though this file only covers 1,032 accounts, a compromised university email is often the key to far more than just that inbox. Students and staff frequently reuse the same password for banking, personal email, and other online accounts, so anyone affected faces a real risk of credential stuffing, account takeover, identity theft, or financial fraud if the same login was reused elsewhere. How a Combolist Like This Gets Built: combolists are typically created by pulling email and password pairs from older data breaches, phishing pages, or malware-infected devices, then sorting them by the domain or organization they belong to. A combolist focused on a single domain like adelaide.edu.au suggests the compiler filtered a larger dataset specifically for accounts on that domain before sharing it. Check If You Are Affected: if you have an adelaide.edu.au email address, or any other account, and want to know whether it appears in this combolist or another leak, HEROIC's free breach scanner checks your information against a database of more than 400 billion leaked records, so you can find out quickly and update any passwords that need it.