The ‘SMF Checked TikTok Logins’ Dump Contains Exactly 334 Pairs

The "SMF Checked TikTok Logins" Combolist Contains Exactly 334 Credential Pairs

On January 23, 2025, HEROIC's threat intelligence analysts identified a combolist labeled "SMF checked ticktok logins" being shared by a user on Telegram. The verified file contains exactly 334 records, each pairing an email address with a plaintext password and the URL of the TikTok login page the credentials work on. Most of the affected accounts are tied to the United States.

Why This Is Dangerous

The word "checked" in this file's name means the seller already tested each credential pair and confirmed it currently logs in, rather than offering an unverified batch. Combined with plaintext passwords and the exact login URL included for every record, an attacker does not need to guess whether a password works or where to try it, both answers are already provided. That leaves very little standing between someone finding this file and gaining access to a TikTok account that is not theirs.

What Was Exposed in the SMF Checked TikTok Logins Dump

• Email addresses
• Plaintext passwords
• URLs linking each credential pair to its login page

Why This Matters Even at 334 Accounts

A file with exactly 334 records is small compared to breaches that expose millions, but a hijacked social media account can still cause real harm to the person behind it. Whoever controls the account can post as its owner, message their followers, or use it to run scams. If the same password was used on other accounts, the exposure can spread through credential stuffing into email, banking, or shopping accounts as well.

How a "Checked" TikTok Combolist Like This Is Built

Combolists that target a specific platform are usually built by pulling stolen credentials from older breaches, phishing pages, or malware infections, then testing each pair specifically against that platform's login page to confirm which ones still work. Once verified, files like "SMF checked ticktok logins" are uploaded to Telegram channels or dark web forums, where they are shared or sold to buyers looking for working accounts on that service.

Check If Your TikTok Login Was Part of This Leak

You do not have to wonder whether you are one of the 334 people in this file. HEROIC's free breach scanner checks your email address against a database of more than 400 billion leaked records, including combolists like this one, and tells you immediately if you have been exposed. If you find a match, change that password right away, and anywhere else you may have reused it.