Inside the 'Denmark Corp' Combolist: How 1,052 Business Logins Leaked

In February 2026, HEROIC analysts identified a combolist labeled "DENMARK CORP-OTHERS-PRO MAILS TEST SAMPLE" that a Telegram user uploaded on February 22. The file contains 1,052 records tied to Danish corporate and professional email accounts, pairing each address with a plaintext password and the URL it was used on. Why a Corporate-Focused Combolist Raises the Stakes Business email accounts often carry more value to attackers than personal ones, since they can lead to internal company systems, client information, or financial tools. Because every password in this file is stored in plaintext and paired with the exact site it was used on, an attacker does not need to guess or crack anything to attempt a login on a Danish company account. What Was Exposed Email addresses Plaintext passwords, stored in readable, unencrypted form URLs showing where each login was used Why This Matters for the 1,052 Accounts Involved A compromised business email account can expose more than just a single inbox. It can lead to invoice fraud, unauthorized wire transfers, or access to internal company tools if the same credentials are reused for other business systems. Anyone whose work email appears in this file faces the same risks as a personal account: credential stuffing, account takeover, and potential fallout for their employer. How a Combolist Like This One Gets Built A combolist is a compiled file of email and password pairs, usually gathered from older breaches, malware infections, or phishing campaigns, then organized into a single list matched to the sites each credential works on. Labeling this one a "test sample" suggests it may be a preview batch meant to demonstrate the quality of a larger set before it is sold or shared more widely. Telegram remains a common venue for distributing files like this to interested buyers. Check If Your Business Email Was Among the 1,052 Exposed If you hold a Danish corporate or professional email account, it is worth checking whether your credentials appear in this list. HEROIC's free breach scanner checks your email against a database of more than 400 billion exposed records, including combolists like this one, so you can find out quickly and secure your account before it is used against you or your employer.