Libero.it Leak: 11,438 Accounts, About as Many as a Small College

HEROIC analysts found a combolist named libero.it, uploaded to Telegram on June 2, 2026, containing 11,438 records tied to the Italian email provider libero.it. Each record includes an email address, a plaintext password, and the URL the login was intended for. Why This Is Dangerous: With passwords stored in plaintext, attackers can use the credentials immediately, no cracking or extra steps required. At 11,438 records, that's roughly as many people as a small college campus, all sharing the risk that their password was reused elsewhere. What Was Exposed: Email addresses on the libero.it domain, plaintext passwords, and the URLs tied to each login. Why This Matters: Email accounts are often the recovery point for banking, shopping, and social media logins. If someone reused their libero.it password on other sites, or if their email itself is compromised, attackers can use it to reset passwords and take over additional accounts, opening the door to identity theft and financial fraud. How This Combolist Was Built: Lists like this are typically compiled by filtering larger stealer malware logs or older breach dumps for addresses matching a specific domain, in this case libero.it, then shared on Telegram under that domain's name. Check If You Are Affected: HEROIC's free breach scanner checks your email against more than 400 billion leaked records. Run a scan today to see if your libero.it or any other email account has been exposed.