The FR 3.13 Combolist: 361,558 Records Leaked Since 2023

HEROIC analysts catalogued a combolist file named FR 3.13 that traces back to January 2023, when it first appeared in circulation, though it was not added to our tracked records until more recently. The file contains 361,558 records pairing email addresses with plaintext passwords and the URLs each pair was tied to. The name includes an FR label, which may point to a regional or language focus, though we have not independently verified that detail. Why This Is Dangerous: A combolist that has been circulating since 2023 has had years to be copied, resold, and tested against login pages by multiple groups. Because the passwords are stored in plaintext, every one of those years represents ongoing exposure for anyone whose credentials appear in the file and who has not changed their password since. What Was Exposed: - Email addresses - Plaintext passwords - URLs linked to each account Why This Matters: Old combolists do not lose their value to attackers just because they have been around for a while. If you have not changed a password that was exposed back in 2023, it could still work today, and attackers regularly recycle older lists like this one for fresh credential stuffing campaigns against banking, email, and shopping sites. How a Combolist Like This Works: These lists are compiled from stolen or leaked username and password pairs, often gathered from stealer malware or earlier breaches, then shared and resold repeatedly over time on Telegram and dark web forums, which is how a 2023 dataset can still be circulating years later. Check If You Are Affected: Run a free scan with HEROIC's breach scanner, which checks your email against more than 400 billion leaked records, to see if your credentials from this or any other breach are still exposed.