HEROIC Analysts Find 117 Logins in Drivers Training Test File

HEROIC analysts came across a combolist file tied to an automated drivers training, testing, and skill program while reviewing recently shared credential lists, and found 117 records inside. Each record includes an email address, a plaintext password, and the URL the login was created on. The file is dated to May 2025 and is a list of accounts connected to that training platform, not proof that the platform itself was broken into. Scanning your email is the only way to confirm whether you are one of the 117 people in this file.

Why This Small File Still Poses a Real Risk

A smaller record count does not make a plaintext password any less usable. Anyone who reused this password on a personal or financial account has the same exposure as someone caught up in a much larger leak, since the password can be tried immediately without any cracking effort.

Details Found in the Drivers Training File

• Email Addresses. Give attackers a working contact for phishing and for matching against other leaked records.
• Plaintext Password. Readable and usable right away, with no decoding needed.
• URLs. Identify the exact training or testing portal each login belongs to.

Why a Training Account Login Can Still Cost You

People frequently reuse passwords across unrelated services, so a password created for a driver training account can just as easily open an email inbox or an online store account. From there, an attacker can reset other passwords, make purchases, or use the account to reach your other contacts.

How This Kind of File Is Normally Assembled

A combolist is put together by collecting email and password pairs from a range of smaller sources and combining them into a single file so they can be tested against many websites at once. According to HEROIC analysts, files this size are often shared quickly among smaller groups before being folded into larger collections.

Responding to the Drivers Training Credential Leak

Start with a scan your email to check whether your address turns up in this file. If it does, change that password on every account tied to it, and consider using a password manager to avoid reusing passwords going forward. This matters for a personal email just as much as a work one.