223,557 Records Leaked From b1nd.net_telefon-treff.de_july2020_vB_220k

HEROIC analysts reviewed a combolist file named b1nd.net_telefon-treff.de_july2020_vB_220k, dated August 23, 2026, containing 223,557 records of email addresses, plaintext passwords, and the URLs those logins belong to. The file name reflects the source list it was compiled from, not confirmation that either named site was itself breached. Scan your email to see if your address is in it.

With over two hundred thousand plaintext password pairs in one file, the consequences extend well past the original accounts the credentials were collected for. Every password is readable the moment the file is opened, and the attached URLs tell an attacker exactly where to try each one first.

What This Combolist Contains

• Email Addresses: identifies each account holder and gives attackers a phishing target.
• Plaintext Passwords: usable immediately, with no cracking needed.
• URLs: show which login each credential pair was collected for.

What a Leak This Size Enables

A file of this scale is typically run through automated tools that test every pair against dozens of popular sites, not just the ones named in the file itself. Anyone who reused a password across multiple accounts faces the broadest risk, since a single working pair can open email, banking, or shopping accounts that have nothing to do with the original login. The consequences here are rarely limited to one account; they spread to every other place the same password was used.

How a File Like This Gets Compiled

Combolists like this one are built by merging email and password pairs from multiple smaller leaks and stealer logs into a single file, then labeling it after the sources it draws from. This labeling does not mean either named service suffered its own breach; it simply reflects where the credentials were originally aimed. The size and age of a file like this often means it has already circulated widely before most people become aware of it.

Limiting the Damage From This Combolist

Scan your email to check your exposure in this file. Change the password for any account where you may have reused the same credentials, starting with email and financial accounts, and use a unique password for each service going forward. Apply the same changes to work accounts, since attackers do not distinguish between personal and professional logins when testing a list like this.