Your Data May Be Exposed: prettylittlething_login_pass, 7,835 Records

HEROIC analysts identified a combolist named "prettylittlething_login_pass" that a Telegram user uploaded, with a leak date recorded as February 5, 2025. The file contains 7,835 records pairing email addresses with plaintext passwords and associated URLs, and its name indicates the credentials are tied to PrettyLittleThing shopping accounts, primarily in the United States.

Why the prettylittlething_login_pass Leak Is Dangerous

Each of the 7,835 records in this file gives an attacker a working email address, its exact password in plain text, and the URL where the login was used. There is nothing to crack or guess, so anyone who gets this file can attempt to log directly into those shopping accounts, and from there, into any saved payment details or personal information stored on file.

What Was Exposed in This Combolist

• Email addresses
• Plaintext passwords
• URLs linked to each account

Why This Matters

Online shopping accounts often have saved addresses, phone numbers, and sometimes payment information attached. If any of these 7,835 people reused their PrettyLittleThing password on their email or banking accounts, attackers can try credential stuffing to break into those too. That is how a single retail account leak can turn into a much bigger identity theft or financial fraud problem.

How a Combolist Like This Gets Made

A combolist pairs stolen usernames or emails with their matching passwords, often collected from phishing pages, malware infections, or earlier breaches before being repackaged and shared. Retail and shopping site logins are common combolist targets because they are plentiful and often reused elsewhere. Once compiled, files like this one are typically distributed for free or sold on Telegram channels.

Check If You Are Affected

If you have a PrettyLittleThing account or any other online account, it is worth checking whether your email address appears in this leak or any other. HEROIC's free breach scanner checks your information against a database of more than 400 billion breached records, giving you a clear answer in seconds.