Check Your Email: saigonnet.vn Leak Exposed 539 Accounts

HEROIC analysts identified a combolist file uploaded to a Telegram channel on 10 June 2026 containing 539 records tied to saigonnet.vn. The file contained email addresses, plaintext passwords, and associated URLs, packaged in the simple username-and-password format that makes combolists so easy for criminals to weaponize immediately.

Why This Is Dangerous

Because the passwords in this file were stored and leaked in plaintext, anyone who downloads it can read the credentials instantly, no cracking or decryption required. An attacker with this list can log straight into any account tied to these email addresses without needing any special tools or technical skill.

What Was Exposed

• Email Addresses
• Plaintext Passwords
• URLs

Why This Matters

A leak of only 539 records may sound small, but each record is a working set of login credentials. Attackers routinely feed lists like this into automated tools that try the same email and password combination across banking, email, and social media sites, a technique known as credential stuffing. If any of these 539 people reused their saigonnet.vn password elsewhere, those other accounts are now at risk of takeover too.

How Combolists Work

A combolist is exactly what it sounds like: a plain text file that "combines" usernames or email addresses with their matching passwords, one pair per line. Unlike a stealer log, which is pulled directly from an infected device, a combolist is often assembled from older leaks, scraped data, or manual uploads, then shared or resold on Telegram and dark web forums. Because the format is so simple, combolists are among the fastest types of leaked data for criminals to put to use.

Check If You Are Affected

If you have ever used saigonnet.vn or reused a password across multiple sites, it is worth finding out whether your information appears in this leak or any other. HEROIC's free breach scanner checks your email address against a database of more than 400 billion leaked records, including combolists like this one, so you can see your exposure and update any at-risk passwords before someone else uses them first.