One Telegram Post, 1,454 Records: The ‘UHQ EU FA’ Combolist Leak

HEROIC analysts found a combolist labeled "UHQ 1.5k EU FA," uploaded to Telegram by a user going by professor66699 on 29-Sep-2024. The file contains 1,454 records, each pairing an email address with a plaintext password, along with URLs tying the credentials back to the accounts they were taken from.

Why This Is Dangerous

The "UHQ" tag in the file name is combolist shorthand for "ultra high quality," meaning the uploader is advertising these credentials as verified and working, not just scraped and untested. Paired with the "EU" label pointing to a European focus, this list is marketed as a targeted, ready-to-use batch rather than a random assortment, which makes it more attractive to buyers looking for a quick payoff.

What Was Exposed

• Email addresses
• Plaintext passwords
• Associated URLs

Why This Matters

With 1,454 records marketed as verified and working, an attacker can move straight to credential stuffing, testing these email and password pairs across banking, email, and social media sites without wasting time on dead logins. Anyone in this file who reused their password elsewhere faces a real risk of account takeover, which can quickly escalate into financial fraud or identity theft if the compromised account controls other logins or personal information.

How This Combolist Was Verified

Lists tagged as UHQ typically go through a checker tool that automatically tests each stolen or guessed credential against the target platform and discards anything that fails to log in. What remains is a smaller, confirmed-working batch that sellers can charge more for than an unverified bulk combolist. The "EU" tag on this one suggests the underlying credentials were filtered or sourced with a European audience in mind.

Check If You Are Affected

Given that this list is being marketed as verified, it is especially worth checking whether your email address appears in it or in any other breach HEROIC has cataloged. HEROIC's free breach scanner searches a database of more than 400 billion exposed records in seconds. If you find a match, change that password immediately and anywhere else you may have reused it.