The MOON LIGHT PRIVATE 26 Dump Put Login Data for 366,396 People

In October 2025, HEROIC analysts identified a combolist labeled MOON LIGHT PRIVATE 26 uploaded to Telegram by an anonymous user. The file put login data for 366,396 people online, pairing email addresses and usernames with plaintext passwords and the website URLs those credentials belong to.

Why the MOON LIGHT PRIVATE 26 Dump Is Dangerous

With no encryption protecting the passwords in this file, anyone who downloads it can immediately test each email and password combination against banks, email providers, and shopping sites. If a match works on even one additional site, that account belongs to the attacker until the password is changed.

What Was Exposed in the MOON LIGHT PRIVATE 26 Dump

• Email addresses and usernames
• Plaintext passwords
• Associated website URLs

Why This Matters for 366,396 People

A dump of this size is large enough to fuel widescale credential stuffing campaigns that quietly test stolen logins across hundreds of popular services. For the people in this file, the risk ranges from a hijacked email inbox to unauthorized bank transfers and full identity theft if their information is combined with other leaked data.

How the MOON LIGHT PRIVATE 26 Combolist Was Compiled

A combolist merges login "combos," an email or username matched with a password, gathered from previous breaches, phishing pages, and malware infections into one file. Building one takes no technical skill, which is why lists of this scale spread quickly once uploaded to Telegram.

Check If You Are Affected

Find out in seconds whether your email is among the 366,396 records in this leak. HEROIC's free breach scanner checks against a database of more than 400 billion leaked records, including this dump, so you can secure your accounts right away.