One Telegram Post. 1,010 Passwords From Private Lines Leaked.

What HEROIC Analysts Found in the Private Lines Combolist

On March 2, 2026, HEROIC analysts identified a combolist titled "Private Lines" after it was uploaded to a Telegram channel by an individual user. The file contains 1,010 records pairing email addresses with plaintext passwords, along with the URLs of the login pages those credentials belong to. The affected accounts are tied primarily to the United States.

Why This Is Dangerous

Because the passwords in this file are stored in plaintext, anyone who downloads it can read and use them instantly, with no cracking or guesswork involved. Paired with the matching email address and login URL, an attacker has a complete set of instructions for breaking into 1,010 separate accounts.

What Was Exposed in the Private Lines Combolist

• Email addresses
• Plaintext passwords
• URLs identifying the associated login pages

Why This Matters

A leaked combolist like this is a ready made tool for credential stuffing, where attackers test each email and password pair against email providers, banking sites, and online retailers. Anyone among the 1,010 people in this file who reused their password elsewhere is at risk of account takeover, unauthorized purchases, and identity theft, since one working login can unlock several unrelated accounts.

How This Combolist Was Likely Built

Combolists like Private Lines are usually assembled from email and password pairs gathered across older breaches, phishing pages, or malware infected devices, then bundled together and given a name before being shared. Once uploaded to a Telegram channel, a file like this can be downloaded and used by anyone within minutes, no technical skill required.

Check If You Are Affected

If you want to know whether your email address is part of the Private Lines leak or any other breach, HEROIC's free breach scanner checks your information against a database of more than 400 billion leaked records. Run a scan today and change any passwords you may have reused across multiple accounts.