Combolist Lists 1.1 Million Logins for cookunity Accounts

HEROIC analysts found a combolist dated late August 2026 carrying 1,177,053 records of login credentials associated with cookunity, made up of email addresses, plaintext passwords, and the URLs they unlock. This file is a list of logins tied to the cookunity name, not confirmation that cookunity itself was broken into, since combolists like this are usually built by matching old leaked credentials against known services rather than pulled from one company's own systems. Either way, with over a million readable passwords in circulation, it is worth taking a minute to scan your email.

What a Login List Tied to One Service Enables

When a list is organized around a single named service, an attacker can go straight to testing those exact credentials against that login page, skipping the guesswork of figuring out where each record applies. A readable password attached to a known destination URL makes that process fast.

Data Found in This cookunity Linked File

• Email Addresses
• Plaintext Password
• URLs

Why Reused Passwords Make This Riskier

The biggest danger with over a million exposed logins is not limited to one account, it is reuse. Anyone who used the same password on their email, banking, or other shopping accounts faces risk well beyond the single login listed in this file.

How Logins for a Single Service End Up in One File

These lists are typically built by taking credentials gathered from many earlier leaks and stealer logs, then filtering for ones that match a particular site or app, in this case cookunity, so the whole file is ready made for anyone who wants to target that one service.

Check Whether Your Login Is in This List

Scan your email to see if your address is among the 1,177,053 records. If it is, change that password right away, along with any other account, personal or work, where you may have reused it.