Btinternet Mailaccess Channel Leak: 100 Webmail Logins Exposed

In November 2025, HEROIC analysts identified a small combolist titled 100 Free Valid Btinternet mailaccess_channel, posted to Telegram by an anonymous user. The file contained 100 records, each pairing an email address with a plaintext password, with many entries including the associated login URL. As the name suggests, this list was built around BT Internet webmail accounts specifically.

Why This Is Dangerous

Because this list is small and labeled as "valid," it was likely tested by whoever uploaded it, meaning the credentials may still work at the time of posting. Since the passwords are stored in plaintext, no cracking is required. Anyone who grabs this file can attempt to log into these BT Internet email accounts immediately, and a working webmail login can be used to reset passwords on other services tied to that inbox.

What Was Exposed

Based on verified data from this listing, the following information was included:

• Email addresses
• Plaintext passwords
• URLs linked to the associated accounts

Why This Matters

A small combolist is still a real threat to the people in it. Attackers running credential stuffing campaigns do not care whether a list has 100 records or a million, they simply add it to their attack pool and test the pairs against other websites. If any of these 100 people reused their BT Internet password elsewhere, they are exposed to account takeover, identity theft, and financial fraud, even though the original leak is small.

How Combolists Are Built

A combolist like this one is compiled by pulling email-and-password pairs from earlier leaks, phishing attempts, or malware infections, then filtering the results down to a specific target, in this case one email provider. The "100 Free Valid" label is common marketing language used by the people who sell or share these lists, signaling to buyers that the credentials have already been checked and are ready to use.

Check If You Are Affected

If you use a BT Internet email address, it is worth checking whether your login appears in this or any other leaked dataset. HEROIC's free breach scanner searches a database of more than 400 billion leaked records in seconds, so you can find out quickly and change your password if it turns up.