The Money-Club Login Combolist Contains Exactly 90 Account Pairs

In June 2025, HEROIC analysts identified a combolist labeled "money-club_login_pass" uploaded to a Telegram channel by an anonymous user. The file contained 90 records pairing email addresses with plaintext passwords and associated URLs. Why the Money-Club Login Combolist Is Dangerous: the passwords in this file are stored as plain, readable text, meaning anyone who obtains the list can log into the associated accounts right away, with no cracking or guessing required. What Was Exposed: email addresses, plaintext passwords, and the URLs tied to each login. Why This Matters: with 90 login pairs exposed, anyone in this dataset who reused their password elsewhere faces a real risk of account takeover. Criminals routinely test small lists like this one against banking sites, email providers, and online stores to see which passwords still work. How a Combolist Works: a combolist compiles email or username and password pairs from a mix of sources, such as older breaches, phishing pages, and malware infections, into a single file that criminals can run through automated login tools. The money-club_login_pass file follows this pattern, bundling 90 email and password combinations with the URLs they were tied to. Check If You Are Affected: HEROIC's free breach scanner checks your email against a database of more than 400 billion leaked records, including combolists like this one. Run a free check to see if your credentials are part of this exposure.