UHQ Mix Combolist Leak Puts 124,656 Logins at Risk of Attack

UHQ Mix: A 124,656-Record Combolist Traded on Telegram

In April 2023, HEROIC analysts identified a large combolist known as UHQ Mix, uploaded to Telegram by an anonymous user. The file contained 124,656 records pairing email addresses with plaintext passwords, along with the URLs each login was tied to. At this scale, the file represents tens of thousands of individual people whose credentials are now sitting in criminal hands.

Why a Mix List This Size Is Dangerous

Because the passwords are stored in plaintext, no decryption or cracking is needed to use them. An attacker with this file can automate login attempts across more than 124,000 email and password pairs in a matter of hours. The larger the list, the more efficient the attack becomes, since even a small success rate against a list this size still yields thousands of working accounts.

What Was Exposed

• Email addresses
• Plaintext passwords
• Associated URLs (the sites tied to each login)

Why This Matters

A combolist of this size is built for credential stuffing, the practice of testing stolen login pairs against dozens of unrelated websites at once. Anyone in this file who reused a password elsewhere is exposed to account takeover, identity theft, and financial fraud, not just on the original site the credentials came from but on every service where that password was reused.

How Large Combolists Like UHQ Mix Are Built

Mix combolists are assembled by merging smaller batches of stolen credentials, gathered from prior breaches, phishing kits, or malware logs, into one large file. They are then cleaned, sorted, and relabeled as a fresh "mix" before being sold or shared on platforms like Telegram. The generic naming lets sellers repost the same underlying data multiple times under different titles.

Check If You Are Affected

With 124,656 records in this single file, the odds that your information is included are real. HEROIC's free breach scanner checks your email against a database of more than 400 billion leaked records, including combolists like UHQ Mix, so you can see your exposure and change any reused passwords before they are used against you.