pochta.02 Holds 140,826 Logins, a Fraction of pochta1’s Haul

A second combolist labeled pochta.02 surfaced alongside a much larger file from the same source, and HEROIC analysts confirmed it holds 140,826 records, a fraction of the 3,322,360 found in the companion pochta1 batch. Dated October 10, 2023, each line still pairs an email address with a plaintext password and login URL.

Why This Is Dangerous

Smaller does not mean safer. Every one of the 140,826 records here is just as usable as one from the larger file, complete with a plaintext password and the exact page it opens.

What Was Exposed

• Email addresses: identify the account tied to each record.
• Plaintext passwords: usable without any cracking step.
• Login URLs: show exactly where each password logs in.

Why This Matters

Splitting one source into numbered files, as this uploader did with pochta1 and pochta.02, spreads a large dataset across more posts and makes it harder for any single warning to cover everyone affected. Checking one file is not the same as checking both of them, and each carries its own set of records worth reviewing separately in turn.

How Combolists Work

Combolists compile email-and-password pairs from older leaked datasets, then get organized and sometimes split by the uploader for easier distribution. Whether a file holds 140,826 records or over three million, attackers run both of them the same way, through automated tools that test every single entry against its matching login page.

Check This Batch Too

Scan your email against this second file, since a clean result on the larger pochta1 batch doesn't rule out this one. If your address turns up here, change that password now, on this account and anywhere else it was reused, work or personal. Splitting a review across two files is worth the extra few minutes it takes to get a fuller picture.