380 Account Logins Found in noreplyid.supercell.com Combolist

HEROIC analysts reviewed a combolist uploaded to a Telegram channel and dated 24-Jan-2026, built around accounts using the noreplyid.supercell.com email pattern. This file lists 380 logins, not a report that Supercell itself was breached. It contains email addresses, plaintext passwords, and URLs tied to accounts registered through that email pattern. Since the passwords sit in plain text, they can be used right away by anyone who has the file. Scanning your email is the fastest way to see if you are one of the 380.

What Someone Could Attempt With This Login List

Each entry pairs a readable password with a web address, so an attacker already knows which account to try it on without cracking anything. If a password in this list was reused somewhere else, that second account becomes just as vulnerable as the first.

The Login Details Found in This Combolist File

• Email addresses
• Plaintext password
• URLs

Why a Short Combolist Still Poses Real Risk

With 380 ready to use logins, automated tools can work through the entire list in minutes, trying each one against popular services to see what else it unlocks. Plaintext storage removes the delay that a hashed password would normally create, so there is little time between exposure and misuse.

How These Credential Lists Get Compiled and Shared

Lists like this are typically pulled together from older leaks or infected devices and then sorted by a shared pattern, here an email domain used across many accounts. Once organized, the file is posted to channels like Telegram where it can be downloaded and tested almost immediately.

Verify Your Email Against This Leak Now

Scan your email to check whether it is part of this combolist or any other known exposure. Check both personal and work email addresses, since accounts using this pattern can belong to either.