Gamers and Shoppers Exposed: the ryder699 Leak Hit 96,948 Accounts

The ryder699 Combolist Targets Gaming and Shopping Accounts

In April 2024, HEROIC analysts identified a combolist labeled "100k Gaming Shopping" and attributed to a user known as ryder699, circulating on Telegram. The file contained 96,948 records, each pairing an email address with a plaintext password and the URL for the gaming or shopping site the credentials unlocked.

Why Gaming and Shopping Accounts Are a Popular Target

Gaming and retail accounts often hold saved payment methods, stored gift card balances, and loyalty points, all of which can be converted into cash or resold by an attacker. That makes a combolist focused specifically on these account types especially valuable on the dark web.

What Was Exposed in the ryder699 Leak

• Email addresses
• Plaintext passwords
• URLs tied to gaming and shopping accounts

Why This Matters

With nearly 97,000 accounts involved, attackers have significant scale to run credential stuffing attempts across gaming platforms and online retailers. A successful login can lead to stolen in-game items, fraudulent purchases, or a foothold for broader identity theft if personal details are stored on the account.

How a Combolist Like This Gets Curated

Credential thieves often sort stolen logins by category, pulling gaming and shopping site credentials out of larger stealer log or breach datasets and packaging them into a themed file like this one, then labeling it with a handle, in this case ryder699, before sharing it.

Check If You Are Affected

Use HEROIC's free breach scanner to check your email against more than 400 billion leaked records, including the ryder699 gaming and shopping combolist, and see which passwords need to change.