The cbn.net.id Leak: 22,893 Emails, More Than Many Small Towns Have

On 10-Jun-2026, HEROIC analysts identified a combolist tied to the domain cbn.net.id after it was uploaded by a Telegram user. The file contained 22,893 records pairing email addresses with plaintext passwords and associated login URLs, more email addresses than many small towns have residents. Why This Is Dangerous The passwords in this file were stored and shared in plaintext, meaning anyone who downloads it can try each email and password combination immediately, with no cracking or decryption required. If any of the 22,893 people in this file reused a password on another account, an attacker can log in right away. What Was Exposed Email addresses Plaintext passwords Associated website URLs (the login pages tied to each credential) Why This Matters Combolists like this one are built for credential stuffing. Attackers feed the email, password, and URL combinations into automated tools that test each login against banking sites, webmail providers, and social platforms. Because the URLs are already attached to each credential, criminals know exactly which site to target. Anyone in this file who reuses passwords faces real exposure to account takeover, identity theft, and financial fraud. How This Combolist Was Built A combolist is a plain text file of email and password pairs, usually pulled together from older breaches, phishing pages, or infected computers and then repackaged for resale or free distribution. Telegram channels have become a common marketplace for these files because they are quick to set up, hard to trace, and can reach thousands of buyers in minutes. A combolist branded around a specific domain, like this cbn.net.id file, is often curated to make the credentials look more targeted and valuable to buyers. Check If You Are Affected With 22,893 email and password pairs exposed in this leak, it is worth checking quickly whether your information is included. HEROIC's free breach scanner checks your email against a database of more than 400 billion leaked records, including combolists like this one, and tells you immediately if you have been exposed.