Inside the Blendr.Badoo.com Combolist: 2,009 Dating Logins Leaked

In June 2026, HEROIC analysts found a combolist labeled blendr.badoo.com uploaded by a user on Telegram. The file contained 2,009 records made up of email addresses, plaintext passwords, and the URLs tied to the accounts, associated with the dating platforms Blendr and Badoo. Why This Is Dangerous: this combolist gives an attacker a ready-made set of working email and password pairs tied to a specific dating platform. Because the passwords are stored in plaintext, there is nothing to crack, so the credentials can be used immediately to try logging into the accounts they came from. What Was Exposed: the file includes email addresses used to register the accounts, plaintext passwords tied to each email, and URLs identifying the platform the credentials belong to. Why This Matters: even at 2,009 records, this is a real risk for the people affected. Dating profiles often contain sensitive personal details, private messages, and photos, and anyone who reused their password on other sites faces credential stuffing attacks that could lead to account takeover, identity theft, or financial fraud if the same password protects an email or banking account. How a Combolist Like This Gets Made: combolists are built by pulling email and password pairs from older breaches, phishing attacks, or malware-infected devices, then organizing them into simple lists targeted at a specific site or platform, in this case one linked to blendr.badoo.com. These lists are typically shared or sold through Telegram channels shortly after being compiled. Check If You Are Affected: if you have ever used Blendr or Badoo and want to know if your email address turned up in this combolist or any other leak, HEROIC's free breach scanner checks your information against a database of more than 400 billion leaked records, so you can find out quickly and update any passwords that need it.