Dormant Since 2018, colordating app Leak Resurfaces: 92,602 Accounts

HEROIC analysts found a combolist tied to the colordating app dating back to September 2018, re-surfacing on Telegram on August 23, 2026. The file contains 92,602 records of email addresses and plaintext passwords, along with the URLs those credentials were used on. Scan your email to see if your address is among them.

The passwords in this file are stored in plain, readable text, not hashed or encrypted in any way, so anyone who gets hold of the file can read and use them immediately without cracking anything. If you used this same password anywhere else back in 2018 and never changed it, that other account is at risk right now.

What This Old File Contains

• Email Addresses: identifies the account holder for targeting.
• Plaintext Passwords: readable and usable immediately, with no cracking needed.
• URLs: shows which site each credential was tied to.

Old Passwords Still Cause New Problems

A password from 2018 feels distant, but plenty of people keep variations of the same password for years across multiple accounts. Because this password is stored in plain text, anyone who reused it on an email, banking, or work login that is still active is exposed today, not just on the original dating app account.

How an Old Combolist Resurfaces

Combolists like this are built by collecting email and password pairs and organizing them into a file that can be tested against other sites. Even years after it was first assembled, a list like this can be reshared or recirculated on Telegram, which is how it was found again now.

What to Do About the colordating app Leak

Scan your email to check your exposure. Because this password is in plain text and ready to use, change it now anywhere you may have reused it since 2018, starting with email and financial accounts, from a device you trust. This goes for old work accounts too, not just personal ones.