Search Your Email: The HQ HOTS BY TORX Leak Exposed 517 Accounts

HEROIC analysts identified a combolist file named “HQ HOTS BY TORX” uploaded to a Telegram channel on 14 August 2026. The file contains 517 records, each combining an email address with a plaintext password and the URL of the site the login belongs to.

Why This Is Dangerous

The passwords in this file were stored and shared as plain, readable text rather than being encrypted. Anyone who gets hold of the HQ HOTS BY TORX file can read every credential instantly and start using it right away, no cracking tools or technical skill needed.

What Was Exposed

• Email addresses
• Plaintext passwords
• URLs linking each login to the site or service it was used on

Why This Matters

Search your email against this leak and others like it, because a combolist this size is still large enough to do real damage. Attackers load lists like HQ HOTS BY TORX into automated tools that test each email and password pair against banks, email providers, and social platforms in bulk, a tactic called credential stuffing. If you reused a password from an account tied to this leak, that single exposed pair can lead to account takeover and identity theft on services that have nothing to do with the original login.

How This Combolist Was Built

A combolist is a compiled file of login credentials gathered from multiple sources, past breaches, phishing pages, and malware, and packaged together for anyone looking for working logins to try. The HQ HOTS BY TORX file follows this pattern, uploaded to Telegram where such lists are traded and redistributed among people searching for accounts to exploit.

Check If You Are Affected

Do not wait to find out the hard way. HEROIC's free breach scanner checks your email against more than 400 billion breached records, including this leak, so you can search your email in seconds and change any password that has been exposed.