If You Have a Cortland.edu Email, 568 Accounts Just Leaked

HEROIC analysts found a combolist uploaded to Telegram on June 10, 2026, titled cortland.edu - 568 emails, containing 568 records of email addresses tied to the cortland.edu domain, along with plaintext passwords and the URLs each login was meant for. Why This Is Dangerous: Because the passwords are stored in plaintext, anyone who obtains this file can attempt to log in immediately without cracking anything. Student and staff email accounts are often linked to financial aid portals, personal banking, and other school systems, so a compromised login can open doors well beyond email. What Was Exposed: Email addresses on the cortland.edu domain, plaintext passwords, and the login URLs associated with each account. Why This Matters: College email accounts are frequently reused as the login for other services, from banking apps to shopping accounts. If any of these 568 people reused their password, attackers can use this list to attempt account takeover, financial fraud, or identity theft well beyond the original account. How This Combolist Was Built: Lists filtered to a single school domain like cortland.edu are usually built by searching larger stealer malware or breach datasets for addresses matching that domain, then packaged separately for buyers targeting a specific institution. It does not necessarily mean the university itself was breached, only that these addresses turned up in data already circulating among attackers. Check If You Are Affected: HEROIC's free breach scanner checks any email address against more than 400 billion leaked records. If you have a cortland.edu account, run a free scan to see if your credentials were exposed.