MAIL ACCESS 124K GMX.DE FRESH 100 Puts 122,185 Accounts at Risk

MAIL ACCESS 124K GMX.DE FRESH 100 Exposes 122,185 Email Accounts

HEROIC analysts found a combolist named "MAIL ACCESS 124K GMX.DE FRESH 100" uploaded to a Telegram channel on 24 October 2025. The file contains 122,185 records tied to GMX.de email accounts, pairing email addresses with plaintext passwords and associated URLs, a large batch of working webmail logins now available to anyone who downloads it.

Why This Is Dangerous

Because these passwords are stored in plaintext, an attacker can log into an affected GMX.de mailbox instantly, with no cracking required. Once inside someone's email, an attacker can read private messages, reset passwords on other linked accounts, and impersonate the victim to contacts or service providers, turning a single leaked password into a much wider compromise.

What Was Exposed

• Email addresses
• Plaintext passwords
• Associated URLs

Why This Matters

Email inboxes are the master key to most of a person's online life, since password reset links, banking alerts, and two factor codes often land there. A combolist of over 122,000 GMX.de credentials gives attackers a large pool of accounts to attempt credential stuffing against other services, and any password reuse turns this leak into a doorway for identity theft or financial fraud.

How a Combolist Leak Works

A combolist gathers email or username and password pairs from previous breaches, phishing pages, or malware infections and bundles them into a single file for sale or free distribution. The label "fresh" in this file's name signals that the uploader is marketing it as recently obtained and less likely to have been changed by victims yet. Telegram remains a popular channel for these dumps because uploads are quick, free, and hard for platforms to remove.

Check If You Are Affected

If you use a GMX.de email address, or if you have reused a password across different accounts, it is worth checking whether your information appears in this leak. HEROIC's free breach scanner searches a database of more than 400 billion leaked records to tell you instantly if your email has been exposed, so you can change any vulnerable passwords right away.