The 22K_Canada_KurdishPy Leak: 16,613 Passwords Exposed. Check Yours.

On July 28, 2026, HEROIC analysts identified a combolist named "22K_Canada_KurdishPy" uploaded to a Telegram channel, containing 16,613 records of email addresses, plaintext passwords, and associated URLs. The file name claims 22,000 records and references Canada, but the verified count in this leak is 16,613, and the regional label comes from the uploader alone without independent confirmation. Why This Is Dangerous: With 16,613 login pairs available in plaintext, this file gives attackers a large, ready-to-use set of credentials. No cracking is required, only the willingness to try each one. What Was Exposed: The leak includes email addresses, plaintext passwords, and the URLs associated with each login, giving attackers a direct map from stolen credential to target site. Why This Matters: A file of this size can fuel widespread credential stuffing attempts. If any of these 16,613 people reused a password across multiple sites, this leak could be the key to their email, banking, or social media accounts elsewhere. How a Combolist Like This Works: A combolist merges email or username and password pairs from earlier breaches or stealer logs into a single file, often labeled with a tool name like "KurdishPy" that references the software or script used to compile or distribute it. Criminals run these lists through automated tools that test every pair against dozens of websites, relying on password reuse to make a portion of the list usable. Check If You Are Affected: HEROIC's free breach scanner checks your email against more than 400 billion leaked records, including combolists like this one. Run a scan to see if your credentials are part of this leak.