Epic Games Combolist Quietly Leaked 58 Account Credentials

Epic Games Combolist: 58 Credential Pairs Leaked on Telegram

In January 2025, HEROIC analysts discovered a combolist labeled epic_games circulating on Telegram. The file held 58 records pairing email addresses with plaintext passwords, plus the URLs those logins were tied to. Combolists like this one are compiled lists of stolen credentials, often gathered from older leaks or phishing campaigns and repackaged under a recognizable brand name to attract buyers.

Why Gamers Should Be Worried

Gaming accounts hold more than just a username. They often carry stored payment methods, linked friends lists, and years of purchased content. Because the passwords in this file are plaintext, an attacker does not need to crack anything. They can plug the 58 email and password pairs directly into a login screen and take over the account in seconds, especially if the same password was reused on other sites.

What Was Exposed

• Email addresses
• Plaintext passwords
• Associated URLs (the login pages tied to each account)

Why This Matters

A leaked combolist rarely stays in one place. Once traded on Telegram, the same 58 credential pairs can be tested against email providers, banking sites, and social media through credential stuffing tools. Any password reuse turns one small leak into a much bigger problem, opening the door to account takeover, identity theft, and financial fraud well beyond gaming.

How a Combolist Like This Gets Built

Combolists are assembled by combining usernames or emails with passwords pulled from previous breaches, malware logs, or phishing pages, then sorted and labeled by the service or brand the credentials belong to. Naming a file after a popular platform like Epic Games makes it easier for buyers to know exactly which accounts they are getting, and easier for criminals to target a specific type of victim.

Check If You Are Affected

If you have ever used an email address for a gaming account or reused a password across services, it is worth checking your exposure now. HEROIC's free breach scanner searches a database of more than 400 billion leaked records, including combolists like this one, so you can find out if your information is out there and secure your accounts before someone else uses them.