The COMBOLIST 1M Slovakia Leak Means Someone Could Be in Your Accounts

HEROIC analysts found a combolist titled "COMBOLIST 1M SLOVAKIA FRESH 100" posted to a Telegram channel on 14-Feb-2026. The file holds 983,964 records tied to Slovak accounts, pairing email addresses with plaintext passwords and the URLs where those logins were captured. At nearly a million entries, this is one of the larger regional combolists HEROIC has tracked recently.

Why This Is Dangerous

Because the passwords in this file are stored in plaintext, there is no cracking or guessing involved, anyone who opens the list can read the password next to the email address immediately. Paired with the URL of the site each login worked on, the file effectively hands an attacker a ready made key for nearly a million accounts. If any of those people reuse the same password elsewhere, the exposure extends far beyond the original site.

What Was Exposed in the COMBOLIST 1M SLOVAKIA FRESH 100 File

• Email addresses
• Plaintext passwords
• URLs of the sites where the credentials were used

Why This Matters for the People on This List

A list of nearly one million working logins is exactly the kind of resource criminals use to run credential stuffing attacks, feeding the email and password pairs into automated tools that try them against banking sites, email providers, and social platforms. Where the password still works, the result is account takeover. From there, attackers can lock out the real owner, drain financial accounts, or use the hijacked identity to commit further fraud.

How a Fresh Combolist Like This Is Built

A combolist is a collected set of username or email and password pairs, usually pulled together from multiple sources such as phishing kits, malware infections, or older breaches, then organized by region or site to make them easier to sell. Labeling a list "fresh" tells buyers it was assembled recently and has not yet been picked apart by security researchers or filtered against known compromised password databases, meaning more of the logins are still likely to work.

Check If You Are Affected

If you have accounts tied to Slovakia or suspect your email may be part of this leak, it is worth checking now. HEROIC's free breach scanner searches more than 400 billion leaked records to tell you quickly whether your information has been exposed and what steps to take next.