HEROIC Analysts Found the USA 8.18 Combolist Leaking 110K Passwords

HEROIC Analysts Uncover the USA 8.18 Combolist

While monitoring Telegram channels used to trade stolen credentials, HEROIC analysts found a combolist named "USA 8.18," dated 23-Jan-2023. The file holds 110,468 records, each containing an email address, a plaintext password, and the URL tied to that login.

Why the USA 8.18 Discovery Is Cause for Concern

Analysts flagged this file because every password inside it sits in plaintext, fully readable the moment someone opens it. Paired with the matching URL, an attacker gets a ready-made shortlist of accounts to try logging into directly, no cracking or guessing needed.

What Analysts Found Exposed in USA 8.18

• Email addresses
• Plaintext passwords
• URLs linked to each set of credentials

Why This Discovery Matters to You

A file this size means over a hundred thousand people are relying on passwords that are now circulating freely. If any of those passwords are reused on other accounts, criminals can use credential stuffing tools to test them at scale, opening the door to account takeover, identity theft, and financial fraud.

How Analysts Trace Combolists Like This One

Combolists are built by combining email and password pairs from earlier breaches or stolen logs into one large file, then shared on channels like Telegram where buyers look for fresh credential dumps. HEROIC analysts track these channels specifically to catch new uploads like USA 8.18 as soon as they surface.

Check If You Are Affected

Curious whether your email appears in the USA 8.18 combolist or any other leak analysts have found? HEROIC's free breach scanner checks your address against a database of more than 400 billion exposed records. Run a free scan now and see what turns up.