The ArtHouse Combo Leak: 10.2 Million Logins Could Unlock Everything

In late July 2026, HEROIC analysts identified a massive combolist labeled "ArtHouse Combo Cloud_part_0009" that a Telegram user uploaded on July 26. The file contains 10,235,232 records, each pairing an email address with a plaintext password and the URL that login was used on, making it one of the largest combolists analysts have tracked recently. Why a Leak This Size Could Unlock More Than One Account Over ten million credential pairs in a single file means the same password habits show up again and again. Most people reuse passwords across email, banking, and social media, so one exposed password rarely stays contained to one account. Because every entry here includes a plaintext password matched to its exact login URL, an attacker can move from one compromised account to the next using the same reused password, effectively chaining access across a person's entire online life. What Was Exposed Email addresses Plaintext passwords, stored in readable, unencrypted form URLs showing where each set of credentials was used Why This Matters for All 10.2 Million Accounts Involved A file of this scale is built for large-scale credential stuffing, where automated tools test each email and password pair against banking sites, email providers, and social media platforms in bulk. If your email account is on this list and the password is reused elsewhere, an attacker who gets into your inbox can often reset passwords on other accounts tied to that email, turning one leaked password into access across your bank, social media, and more. That chain of access is what makes account takeover and identity theft so much easier once a password is exposed. How a Combolist of This Scale Gets Assembled Combolists this large are typically built by merging many smaller batches of stolen credentials, often gathered from older breaches, malware infections, and phishing campaigns, into one master file organized by the site each login belongs to. Labeling it as part of a series, in this case "Cloud_part_0009," suggests it is one piece of a much larger set being distributed in stages. Telegram remains a common channel for sharing files like this quickly to a wide audience. Check If Your Email Was Among the 10.2 Million Exposed With a file this large, checking your exposure is worth doing right away. HEROIC's free breach scanner checks your email against a database of more than 400 billion exposed records, including massive combolists like this one, so you can find out quickly and change any passwords that need it before an attacker chains their way into your other accounts.