The Malaysia Corp-Others-Pro Leak Gives Hackers 1,048 Working Logins

What HEROIC Analysts Found On 22 February 2026, HEROIC analysts identified a file labeled MALAYSIA CORP-OTHERS-PRO MAILS TEST SAMPLE uploaded to Telegram. It contains 1,048 records, each pairing an email address with a plaintext password and a related URL. Why This Is Dangerous Once a file like this is in an attacker's hands, they do not need any special skills to use it. The passwords are already readable, and each entry gives them a working email and password combination they can try against email providers, corporate portals, and personal accounts belonging to the people on this list. What Was Exposed 1,048 email addresses Plaintext passwords for each account URLs tied to each login Why This Matters With working credentials in hand, an attacker can run them through credential stuffing tools that test each pair against dozens of sites automatically. Anyone on this list who reused a password elsewhere risks having other accounts, including email, banking, or workplace logins, taken over as a result. How This Combolist Was Labeled a Test Sample The test sample naming suggests this file is a smaller preview pulled from a larger batch of corporate mail credentials, a common practice among people selling combolists who release a sample to prove the data works before offering the full set. Files like this typically draw on older breaches, phishing pages, and malware logs rather than one single incident. Check If You Are Affected If you have a corporate or personal email tied to this leak, it is worth finding out for certain. HEROIC's free breach scanner checks your email against more than 400 billion leaked records, giving you a quick answer so you can update any password that may still be active elsewhere.