The 88 Test Leak: 14,529 Passwords Exposed. Yours Might Be In It.

HEROIC analysts found a combolist labeled "88 test" uploaded to a Telegram channel on April 1, 2026. Despite the casual, test-like name, the file contains 14,529 real records, each pairing an email address with a plaintext password and the URL that login was used on. Why This Is Dangerous: A filename like "test" can make a file look like throwaway data, but the credentials inside are functioning email, password, and site combinations. Attackers do not care what a file is called, only whether the logins inside it still work. What Was Exposed: Email addresses. Plaintext passwords. URLs showing the site or service tied to each set of credentials. Why This Matters: With over 14,000 working login combinations in one file, this is more than enough for an attacker to run automated credential stuffing against major websites, checking which passwords have been reused elsewhere. One reused password can be all it takes to lose access to an email, banking, or shopping account. How a Combolist Like This Gets Made: Files given informal names like "test" are often early or sample releases from a larger operation, uploaded to gauge interest before a bigger batch is sold or shared more widely on Telegram. The casual name should not be mistaken for low stakes. Check If You Are Affected: HEROIC's free breach scanner checks your email against more than 400 billion exposed records. Run a free scan to see if your password is one of the 14,529 sitting in this file right now.