Denmark 7 uploaded by a Telegram User Leaks 110,241 Records

In February 2023, HEROIC analysts identified a combolist titled "Denmark 7 uploaded by a Telegram User" shared on a Telegram channel. The file contained 110,241 records pairing email addresses with plaintext passwords, plus URLs identifying the sites the credentials came from. Because the passwords are stored as plain text rather than encrypted or hashed, they can be used immediately by anyone who gets hold of the file.

Why This Combolist Leak Is Dangerous

With more than 110,000 credential pairs in plaintext, this is one of the larger combolists HEROIC has tracked from Telegram distribution channels. Attackers who obtain files like this can load the list straight into automated tools and start testing each email and password pair against email providers, banking sites, and social platforms, without needing to crack or decode anything first.

What Was Exposed in the Denmark 7 Combolist

• Email addresses
• Plaintext passwords
• URLs linking each credential pair to its source site

Why This Matters for the 110,241 Records Involved

Because none of the passwords in this file were hashed or salted, every one of the 110,241 records is ready to use the moment it's opened. This is exactly the kind of data that fuels credential stuffing attacks, where automated tools try the same email and password combination across many other websites. Anyone who reused this password elsewhere risks having those accounts taken over too, which can lead to financial fraud, unauthorized purchases, or identity theft if personal information is stored on the affected accounts.

How Combolists Like This One Are Built

A combolist is a compiled text file of email or username and password pairs, usually pulled together from a mix of older breaches, leaks, and stealer logs and repackaged into a single list. Files like the Denmark 7 combolist are often posted for free or sold cheaply on Telegram channels, making them easy for even low-skill attackers to acquire and use. Because a combolist can draw from many different original sources, the credentials inside can range from years old to very recent.

Check If You Are Affected

You don't have to wonder whether your email address is one of the 110,241 records in this combolist. HEROIC's free breach scanner checks your email against a database of more than 400 billion exposed records, including combolists, stealer logs, and other leaked data. Run a free scan now, and update any passwords you may have reused if your information turns up.