January 2026 Combolist Leaks 37.7M AMRTECH-TXTLOG-ULP-FREE-65 9 Logins

In January 2026, a combolist called AMRTECH-TXTLOG-ULP-FREE-65 9 surfaced carrying 37,729,125 records of email addresses, plaintext passwords, and the URLs those logins unlock, dated January 22, 2026. Scan your email to check whether your address is one of the 37,729,125 entries.

Every password in this file sits in plain, readable text, meaning there's nothing slowing an attacker down between finding the file and trying a login. With nearly 38 million records, this is one of the largest combolists HEROIC analysts have reviewed recently.

What's Listed in AMRTECH-TXTLOG-ULP-FREE-65 9

• Email Addresses: Confirms a working account an attacker can target directly.
• Plaintext Passwords: Readable instantly, with no cracking step required.
• URLs: Identifies the exact site each email and password pair unlocks.

Why a File This Size Raises the Stakes

Attackers holding a list this large typically automate login attempts across banking, email, and shopping accounts, counting on reused passwords. Even a small reuse rate across 37.7 million records still adds up to a substantial number of accounts at risk of takeover, fraud, or a hijacked email used to reset other logins. A combolist this large is also likely to be recombined with other leaked files down the line, so a password that was reused anywhere is at risk again each time a new merged list begins circulating.

How a Combolist of This Scale Gets Assembled

Files like this are built by merging email and password pairs from a wide range of sources into one organized list, often grouped by the site each pair logs into. Once compiled, it circulates widely so anyone holding it can try the credentials elsewhere.

What to Do About AMRTECH-TXTLOG-ULP-FREE-65 9

Scan your email to check your exposure. If you're included, change that password everywhere you've reused it, starting with email and financial accounts, and enable multi factor authentication where you can. This applies equally to work and personal email addresses.