One File. 179 Accounts. The BR 4 Combolist Leaked Plaintext Logins.

179 Accounts Exposed in a Small Telegram Combolist Labeled "BR 4"

HEROIC analysts identified a combolist file named "BR 4" uploaded to Telegram on December 5, 2025. The file is small compared to many breach dumps, containing 179 records of email addresses paired with plaintext passwords and the URLs where those credentials were used.

Why This Is Dangerous

Even though this list is small, every password in it is stored in plaintext, meaning anyone who downloads the file can log in immediately with no extra effort. For the 179 people affected, that is just as serious as being caught up in a much larger breach: if the password was reused anywhere else, an attacker can try it on other accounts right away.

What Was Exposed

• Email addresses
• Plaintext passwords
• URLs tied to each set of credentials

Why This Matters

Small combolists like this one often get folded into larger collections that attackers use for credential stuffing, testing stolen email and password pairs against banking sites, email providers, and online stores. Because the passwords here were never hashed, there is no barrier between exposure and account takeover for anyone who reused this password elsewhere.

How a Combolist Like This Is Made

A combolist is a text file of email or username and password combinations, often assembled from smaller breaches, phishing pages, or stealer malware logs and then shared for free or sold in bulk. Files this size are frequently posted in Telegram channels dedicated to trading and trying out leaked credentials before larger compilations are built.

Check If You Are Affected

If you want to know whether your email address and password appear in this leak or any other, HEROIC's free breach scanner checks your information against a database of more than 400 billion leaked records so you can find out and secure your accounts.