10,355 Epic Games Logins Quietly Leaked on Telegram Last Year

HEROIC analysts spotted a combolist tied to www.epicgames.com that a Telegram user quietly uploaded on May 25, 2025. Unlike a headline-grabbing breach announcement, this file surfaced without fanfare, yet it still contains 10,355 records pairing email addresses with plaintext passwords and the URLs the credentials belong to. Why this is dangerous: Epic Games accounts are tied to Fortnite, the Epic Games Store, and often linked payment methods or connected platforms like PlayStation and Xbox accounts. Because the passwords in this file are stored in plaintext, anyone who gets hold of it can log in immediately, no cracking required, and potentially access saved payment details or in-game purchases. What was exposed: the file lists email addresses used to register Epic Games accounts, plaintext passwords with no protection, and the account URLs tied to each entry, giving an attacker a direct path into a gaming account and anything linked to it. Why this matters: gaming accounts are frequently overlooked when people think about their online security, but they often store saved payment cards, linked email addresses, and connections to other platforms. Attackers use combolists like this one for credential stuffing, testing the same email and password combination against other services since so many people reuse passwords. A compromised gaming account can lead to unauthorized purchases, stolen in-game items, and a foothold into other accounts tied to the same email. How this combolist quietly circulated: files like this typically move through private Telegram channels for weeks or months before anyone outside a small circle of buyers and sellers notices them. They are compiled from stealer malware logs, phishing pages, or older breaches, then filtered by the website or service the credentials belong to, in this case Epic Games, so a buyer can target a specific platform's userbase directly. Check if you are affected: if you have an Epic Games account, or use the same email and password combination anywhere else, it is worth checking now rather than waiting for official confirmation. HEROIC's free breach scanner searches more than 400 billion leaked records, so you can find out in seconds whether your credentials were part of this leak and change them before someone else does.