The BERSERK PRIVATE 100 Combolist: 951 Stolen Login Credentials Leaked

In March 2026, HEROIC analysts identified a combolist file labeled "BERSERK PRIVATE 100" uploaded to a Telegram channel. The file contained 951 exposed records tied to United States based accounts, including email addresses, plaintext passwords, and the URLs of the sites those login pairs belong to.

Why This Is Dangerous

The "private" label on files like this one usually means the credentials were curated or verified before being shared, making them more likely to still be active. Combined with the fact that each password is stored in plaintext and matched to a specific site, this file gives an attacker a working list of accounts to try immediately.

What Was Exposed in the BERSERK PRIVATE 100 Combolist

• Email addresses
• Plaintext passwords
• URLs linked to each set of credentials

Why This Matters

With 951 credential pairs in circulation, this file is large enough to power a serious credential stuffing campaign. Anyone who reused a leaked password on another account risks having that account taken over, which can quickly escalate into identity theft or financial fraud if banking or shopping accounts are involved.

How a "Private" Combolist Like This Gets Made

Combolists marketed as "private" are usually built the same way as public ones, by pulling email and password pairs from older breaches, phishing pages, or stealer malware infections, then merged into one file. The difference is that sellers often test the credentials first and restrict distribution to paying buyers or trusted contacts, which is likely why this 951 record file was labeled BERSERK PRIVATE 100 before it reached this Telegram channel.

Check If You Are Affected

A private combolist can circulate quietly for a while before its contents are put to use. HEROIC's free breach scanner checks your email against a database of more than 400 billion leaked records, so you can find out in seconds whether your credentials were part of this leak and change your passwords before an attacker gets there first.