This USA Test Leak Falls Just 1 Password Short of 10,000

On May 22, 2026, a Telegram user uploaded a combolist called "usa test." The file contains exactly 9,999 records, one shy of an even 10,000, each pairing an email address with a plaintext password and the website URL it worked on.

Why the USA Test Leak Is Dangerous

That oddly specific count of 9,999 is a small reminder of how these files get built. Rather than a clean round number, it reflects exactly how many working email and password pairs the uploader had managed to collect at that moment, no more and no less, all sitting in plaintext ready to be tested.

What Was Exposed in the USA Test Combolist

• Email addresses
• Plaintext passwords
• Associated website URLs

Why This Matters

Whether a leak contains 9,999 records or a round 10,000, the risk to each individual account is identical. Falling one record short of a milestone number does nothing to lessen the danger for the people whose credentials made the list, and it certainly does not make the file any less useful to whoever downloads it.

How Combolists Like USA Test Work

Combolists are built incrementally, often pulled from whatever smaller breaches or stealer logs happen to be available when the uploader compiles the file. That is why record counts frequently land on odd, uneven numbers like 9,999 rather than tidy round figures, since the list simply reflects how much stolen data was on hand at the time.

Check If You Are Affected

Whether the count is round or not, it is worth checking if you are one of the 9,999. HEROIC's free scanner searches more than 400 billion leaked records, including this usa test file, so you can quickly confirm whether your email or password needs to change.