The ‘France’ Telegram Dump Contains Exactly 4,863 Password Pairs

On March 31, 2024, HEROIC's dark web monitoring team flagged a combolist circulating on Telegram labeled "France." The file contains 4,863 records pairing email addresses or usernames with plaintext passwords and the URLs those logins were used on.

Why the "France" Leak Is Dangerous

Because the passwords sit in plaintext, there is no cracking involved: anyone who downloads the file can read every login immediately. Combined with the linked URL, an attacker knows exactly which site to try each credential on first.

What Was Exposed

• Email addresses
• Plaintext passwords
• URLs tied to each login

Why This Matters for Your Other Accounts

A leak this size might look small next to headline-grabbing mega breaches, but each record is a working login. If any of the 4,863 people in this file reused their password elsewhere, an attacker can use credential stuffing to try that same email and password against banking, email, and shopping sites until one lets them in.

How This Combolist Was Built

A combolist is a plain text list pairing usernames or emails with passwords, one entry per line. These lists are usually stitched together from older breaches, phishing campaigns, and malware-infected devices, then cleaned up to remove duplicates. Once compiled, files like this one get uploaded to Telegram channels where anyone can download and test them.

Check If You Are Affected

HEROIC's free breach scanner checks your email against a database of more than 400 billion leaked records, including this leak. Run a scan today to see if your information appears and get clear next steps to secure your accounts.