Researchers Flag UAE Corporate Combolist: 1,050 Emails Leaked

HEROIC analysts identified a combolist labeled UNITED ARAB EMIRATES CORP-OTHERS-PRO MAILS TEST SAMPLE that a Telegram user uploaded on February 22, 2026. The file contains 1,050 records pairing corporate email addresses with plaintext passwords and the URLs those logins connect to. Why a Corporate Sample Like This Is Dangerous Because the file is labeled as a business or corporate mail list, the accounts inside likely belong to employees at UAE companies rather than personal email users. With passwords stored in plaintext and login URLs included, an attacker can move straight from opening the file to accessing a corporate inbox, which can expose internal communications, client information, or company systems tied to that email address. What Was Exposed Corporate email addresses Plaintext passwords URLs linked to the accounts Why This Matters A compromised business email account can be used to impersonate an employee, request wire transfers, or gain access to other internal accounts, making this kind of leak especially valuable to attackers running business email compromise scams. Anyone among the 1,050 people in this file who reused their corporate password on a personal account also risks having that account taken over. How This "Test Sample" Combolist Fits the Criminal Marketplace Sellers on Telegram often release a small "test sample" like this 1,050-record file to prove a much larger list is real before selling the full version. Combolists like this one are typically built from previous data breaches, phishing campaigns targeting corporate employees, or malware that steals saved credentials, then sorted by region or organization type, in this case United Arab Emirates corporate email accounts. Check If You Are Affected If you use a corporate email address and want to know whether your credentials appear in this sample or any other breach, HEROIC's free breach scanner checks your information against a database of more than 400 billion compromised records. If you find a match, change your password immediately and alert your IT or security team.