Our Analysts Found the 'FRANCE COMBO TEST' Leak: 10,381 Logins

In May 2026, HEROIC analysts found a combolist labeled "FRANCE COMBO TEST" circulating after a Telegram user uploaded it on May 20. The file contains 10,381 records pairing email addresses with plaintext passwords and the URLs each login was used on, packaged and shared as a single ready-to-use file. Why This Combolist Discovery Matters The file's name suggests it was built or tested as a targeted list, and the scale here, over ten thousand credential pairs, puts it well beyond a casual leak. Because the passwords are stored in plaintext and matched directly to the URL each one was used on, an attacker can move straight from download to login without cracking a single password. That combination is exactly what makes a list like this valuable on dark web channels. What Was Exposed Email addresses Plaintext passwords, stored in readable, unencrypted form URLs showing the exact site or service each login belongs to Why This Matters for the 10,381 Accounts Involved A list of this size is large enough to run through automated credential stuffing tools, where attackers test each email and password pair against banking sites, email providers, and social platforms in bulk. Anyone who reused this password elsewhere faces the same risk on those other accounts too. Once an attacker gets in, the next steps are predictable: account takeover, unauthorized charges, or identity theft if personal information sits behind the login. How a Combolist Like "FRANCE COMBO TEST" Comes Together Combolists are built by collecting email and password pairs, often sourced from older breaches, malware infections, or phishing campaigns, then organizing them into a single file matched to the site each credential works on. Files labeled as a test batch are sometimes early samples that a seller or distributor puts out before offering a larger set, which is one reason lists like this are worth taking seriously even before a full-scale version appears. Telegram remains a popular way to share these files quickly and with little accountability. Check If You Were Part of This 10,381-Record Leak If you want to know whether your email shows up in this combolist, HEROIC's free breach scanner checks your address against a database of more than 400 billion exposed records, including combolists like this one, so you can find out quickly and secure any account that needs it.