Attackers Can Now Test 2,186,642 Stolen Xavier_Ulp Logins

Some leaks are a handful of accounts. This one is not. Xavier_Ulp - 3970000 Xavier_Group premium, uploaded to Telegram in April 2026, contains a staggering 2,186,642 records, and every single one gives an attacker a working email and password pair to try. HEROIC analysts flagged this dump because of both its size and how usable it is straight out of the box for anyone with bad intentions.

Why This Is Dangerous

What separates this from a lot of other leaks is scale combined with format. A ULP file, meaning username, password, is basically pre packaged for automated attacks. Criminals dont even need to do any extra work, they can load the whole list straight into a tool and start firing off login attempts across hundreds of websites at once.

What Was Exposed

The file that analysts reviewed included:

• 2,186,642 total records
• Email Addresses
• Plaintext Password entries
• URLs showing which sites the logins belong to

Why This Matters

With over two million pairs in plaintext, attackers can run what is known as credential stuffing, basically throwing every combination at popular sites to see what sticks. Because so many people recycle the same password across multiple accounts, even a small success rate on a list this size translates into a huge number of compromised accounts.

How ULP Combolists Work

A ULP combolist is usually assembled from stealer logs, older breaches, or credential stuffing attempts that got combined into one giant text file of email and password combinations. Its stripped down and efficient by design, no extra clutter, just the data an attacker needs to automate account takeovers at scale. Once compiled, files like this circulate widely on Telegram and dark web forums, often for free.

Check If You Are Affected

Given the size of this leak, its worth checking your accounts sooner rather than later. HEROIC's free breach scanner covers a database of more than 400 billion leaked records and can quickly tell you if your email shows up in this dump or countless others like it.