Identity Theft Got Easier: UHQ MIX 4 Leak Puts 90,317 at Risk

HEROIC analysts found a combolist named UHQ MIX 4 uploaded to a Telegram channel on 2 April 2023. The file contained 90,317 records pairing email addresses with plaintext passwords, along with associated URLs for the accounts involved.

Why This Is Dangerous

With passwords stored in plaintext, anyone who downloads UHQ MIX 4 can read all 90,317 credential pairs immediately and start attempting to log into the matching accounts, with no cracking or specialized skill required. A dump this large gives attackers a huge pool of working logins to test at scale.

What Was Exposed

• Email Addresses
• Plaintext Passwords
• URLs

Why This Matters

A leak of over 90,000 records means identity theft becomes far easier for the criminals who obtain it. Attackers commonly run credential stuffing campaigns using lists like UHQ MIX 4, automatically testing each email and password combination against banking, email, and shopping sites. If any of these 90,317 people reused their password elsewhere, those accounts, along with any personal or financial information behind them, are exposed to takeover and fraud.

How Combolists Work

A combolist pairs email addresses or usernames with matching passwords in a simple text file, one record per line. Rather than being harvested fresh from an infected device, a large list like UHQ MIX 4 is typically assembled from multiple older leaks and scraped data, then repackaged and circulated on Telegram channels and dark web forums. Its size and simple structure make it an efficient tool for criminals running large-scale automated attacks.

Check If You Are Affected

With over 90,000 records involved, there is a real chance your credentials could be among them, especially if you have reused a password across multiple accounts. HEROIC's free breach scanner checks your email address against more than 400 billion leaked records, including dumps like UHQ MIX 4, so you can find out quickly and update any passwords that may be compromised.