The Ingdirect.ca Leak Contains Over 10,000 Bank Login Records

HEROIC analysts found a combolist titled "ingdirect.ca - 10.512 emails," uploaded by a Telegram user and dated June 10, 2026. The file contains 10,512 records pairing email addresses with plaintext passwords, along with the URLs tied to those logins, with the naming suggesting a focus on ingdirect.ca accounts.

Why the Ingdirect.ca Leak Is Dangerous

When a combolist is named after a specific bank domain, it signals that the credentials inside were likely used to log into banking services. Because the passwords are stored in plaintext, an attacker can use them immediately rather than needing to crack anything first, and the URLs included in the file point directly to which accounts those logins belong to, making it easier to target financial accounts specifically.

What Was Exposed in This Combolist

• Email addresses
• Plaintext passwords
• URLs tied to each set of credentials

Why This Matters for the 10,512 Accounts Involved

If your email address is part of these 10,512 records, an attacker already has a password to try against your accounts, and if the file is truly tied to ingdirect.ca as the name suggests, banking access could be at stake. Reused passwords make this worse, since the same credentials tried on a banking login might also unlock email, shopping, or social media accounts, opening the door to credential stuffing, account takeover, and financial fraud.

How This Combolist Was Assembled

A combolist compiles login credentials, often gathered through malware infections, phishing pages, or earlier breaches, into a single file of email and password pairs. Lists focused on a specific bank domain, like this one appears to be, are often filtered out of larger collections because financial credentials are considered more valuable to buyers on Telegram and dark web marketplaces. Attackers test these credentials in bulk, looking for accounts where the password still works.

Check If You Are Affected

With 10,512 records tied to this leak, it is worth checking your exposure now rather than later. HEROIC's free breach scanner searches your email against a database of more than 400 billion leaked records, including combolists like this ingdirect.ca list, so you can find out if you are affected and secure your accounts before an attacker tries first.