The FR Combolist Put 10,346 Stolen Login Credentials Online

HEROIC analysts found a combolist labeled "fr" that a Telegram user uploaded on 08-Jun-2026. The file contains 10,346 records of email and username and password credentials tied to accounts in the United States.

Why This FR Combolist Is Dangerous

What makes a file like this dangerous is not the label it was given, it is what's inside: over ten thousand working login combinations ready to be tested against other sites. There is no cracking or guessing involved. Anyone who downloads this combolist has an immediate list of email and password pairs they can try on banking, shopping, and social media platforms.

What Was Exposed

• Email Addresses
• Plaintext Passwords
• URLs

Why This Matters

If any of the 10,346 credentials in this file match a password you still use, you are exposed to credential stuffing, where attackers automatically try your email and password combination across hundreds of other websites. Because so many people reuse passwords, a single leaked login can lead to unauthorized access to your email, financial fraud, or a broader case of identity theft.

How a Combolist Spreads

Combolists are built by combining login data from older breaches, phishing pages, and malware infections into a single file of email and password pairs. Once a file like this one is uploaded to a Telegram channel, it can be copied and redistributed within hours, giving anyone with access a ready-made list of credentials to test against popular sites.

Check If You Are Affected

Rather than wondering if your information is part of this leak, you can check directly. HEROIC's free breach scanner searches a database of more than 400 billion leaked records, including combolists like this one, so you can quickly find out if your email is affected and change any passwords that need it.