The Qatargas Combolist: 2,096 Corporate Logins Leaked on Telegram

HEROIC analysts identified a combolist tied to qatargas.com.qa, the corporate email domain of Qatar's major liquefied natural gas producer, uploaded by a Telegram user on June 10, 2026. The file contains 2,096 records, each pairing a qatargas.com.qa email address with a plaintext password and the URL the credentials unlock. Why this is dangerous: because these are corporate email addresses tied to an energy company, a successful login could expose internal communications, business systems, or other company resources connected to that email account. The passwords in this file are stored in plaintext, so an attacker does not need any technical skill to use them, they can simply try logging in with the credentials as uploaded. What was exposed: the dataset includes qatargas.com.qa email addresses, plaintext passwords with no encryption protecting them, and the URLs tied to each account, giving anyone who obtains the file a working login for every one of the 2,096 records. Why this matters: a breach touching corporate email accounts carries risk beyond the individual employee, since work email is often the gateway to internal systems, shared documents, and other company accounts. If an employee reuses their work password elsewhere, or their work login is reused to access personal accounts, a single exposed credential pair can lead to account takeover, business email compromise, or broader corporate identity theft. How this combolist was likely built: combolists like this one are typically assembled from stealer malware infections on employee devices, phishing campaigns, or older breaches, then sorted by company domain so a buyer can specifically target one organization's staff. Sorting credentials this way makes the list more valuable on Telegram and dark web marketplaces, since it lets an attacker focus their efforts on a single company rather than sifting through unrelated accounts. Check if you are affected: if you have a qatargas.com.qa email address, or reuse a work password on personal accounts, it is worth checking whether your credentials appear in this leak. HEROIC's free breach scanner searches more than 400 billion leaked records, giving you an instant answer so you can change any exposed passwords before someone else uses them.