Log Pass 64 Combolist Leak: 197,445 Accounts Now At Risk

Log Pass 64: Telegram Combolist Exposes 197,445 Records

HEROIC analysts identified a combolist named "log pass 64" that a Telegram user uploaded on 7 February 2023. The file contained 197,445 records pairing email addresses with plaintext passwords, plus associated URLs pointing to where each credential was originally used.

Why This Is Dangerous

Nearly 200,000 passwords in this list are stored in plaintext, meaning an attacker can start using them the moment they download the file, with no cracking required. The paired URLs point straight to the login pages tied to each credential, making it simple for criminals to automate break-in attempts at scale.

What Was Exposed

• Email addresses
• Plaintext passwords
• Associated URLs

Why This Matters

A leak of this size sets off a chain reaction. Because so many people reuse passwords, a single exposed email-and-password pair from "log pass 64" can be tested against banking apps, email providers, and shopping accounts, turning one leaked credential into account takeover, financial fraud, or identity theft before the victim even knows anything is wrong.

How Combolists Work

A combolist compiles email-or-username-and-password pairs, usually gathered from past breaches, phishing pages, or malware-infected devices, then packages them for sale or free distribution. Criminals load these files into automated tools that test every pair against hundreds of websites simultaneously, relying on the fact that password reuse will unlock at least some accounts. Telegram remains a preferred distribution point because uploads happen instantly with little oversight.

Check If You Are Affected

With 197,445 records now circulating from this leak, checking your exposure is a smart first step. HEROIC's free breach scanner searches a database of more than 400 billion leaked records, including this combolist, so you can find out in seconds and change any passwords you have reused elsewhere.