The r7.com.br Combolist Leaked 695 Brazilian Email Accounts

What HEROIC Analysts Found in the r7.com.br Combolist: In June 2026, HEROIC analysts found a combolist labeled "r7.com.br - 695 emails" circulating on Telegram. The file contains 695 records, each pairing an r7.com.br email address with a plaintext password and a related login URL. Why the r7.com.br Leak Is Dangerous: Because the passwords are stored in plaintext, anyone who has this file can use the credentials immediately. Although the total number of records is small, each one represents a real account that could be accessed right now by anyone who downloads the file. What Was Exposed: This leak includes r7.com.br email addresses, plaintext passwords, and URLs tied to the associated accounts. Why This Matters: Even a small combolist like this one can be used for credential stuffing, where attackers try each email and password pair against other websites automatically. If any of these 695 people reused their password on another account, such as personal email or online banking, that account could be compromised using the same login details. How Combolists Work: A combolist bundles stolen email and password pairs, often gathered from breaches or phishing campaigns tied to a specific domain, into one file. Smaller lists like this r7.com.br combolist are frequently shared for free on Telegram to build an uploader's reputation before larger or more valuable data is sold. Check If You Are Affected: If you have an r7.com.br email address or use the same password across multiple accounts, checking your exposure is quick and free. HEROIC's breach scanner searches more than 400 billion leaked records so you can see if your information has surfaced anywhere.