One Telegram Upload. The UHQ Mix 4 114 List Held 328,598 Logins.

In April 2023, HEROIC analysts found a combolist file called UHQ Mix New 4 114 circulating in a Telegram channel. UHQ is common shorthand in these communities for Ultra High Quality, meaning the list is marketed as containing verified, working logins. The file contained 328,598 records pairing email addresses with plaintext passwords and associated URLs. Why This Is Dangerous: Because sellers market UHQ lists as pre-checked for accuracy, criminals treat them as reliable inventory for credential stuffing. That means a larger share of the entries in a list like this are likely to be live, working logins rather than stale or outdated data. What Was Exposed: - Email addresses - Plaintext passwords - URLs linked to each account Why This Matters: At more than 328,000 records, this is a sizable list, and its marketing as verified makes it especially attractive to attackers. If your email and password appear here and you reuse that password elsewhere, an attacker can move quickly from this list into your other accounts, risking account takeover, fraud, and identity theft. How a UHQ Combolist Like This Works: Sellers build these lists by combining data from stealer malware infections and older breaches, then testing the credentials against login pages to confirm they still work before labeling the batch as high quality. The verified lists then get sold or shared on Telegram and dark web markets. Check If You Are Affected: Run a free scan with HEROIC's breach scanner, checking your email against more than 400 billion leaked records, to see if your credentials are part of this list or any other exposed dataset.