UHQ Mix Combolist Leaked in 2023: 99,814 Records Now Public

HEROIC analysts identified a combolist known as the UHQ Mix, uploaded to a Telegram channel on March 9, 2023, containing 99,814 records tied to accounts in the United States. The list pairs email addresses with plaintext passwords and includes associated URLs, meaning it was likely assembled by combining data stolen from multiple earlier sources into a single ready-to-use file.

Why This Is Dangerous

Because the passwords in this list are stored in plaintext, anyone who obtains the file can use the credentials immediately, no cracking or decryption required. Attackers can plug these email and password pairs directly into automated tools and start testing them against other websites within minutes.

What Was Exposed

• Email addresses
• Plaintext passwords
• Associated URLs

Why This Matters

If you have ever reused a password across more than one site, a leak like this one becomes a master key. Criminals take combolists like the UHQ Mix and run them through a technique called credential stuffing, automatically trying each email and password combination against banking sites, email providers, and social media platforms. When a match hits, the result can be account takeover, financial fraud, or identity theft.

How Combolists Work

A combolist is a compiled file of username or email and password pairs, often stitched together from several older breaches or stealer logs and repackaged for easy use. Unlike a single company's breach, a combolist can blend credentials from many unrelated sources, which is why the URLs included in this file matter. They point to the specific sites where each password was originally used, making it easier for an attacker to target the right platform with the right stolen login.

Check If You Are Affected

With 99,814 records now circulating from this combolist, the safest move is to check your own exposure rather than assume you are not on the list. HEROIC's free breach scanner searches a database of more than 400 billion leaked records, including combolists like the UHQ Mix, to tell you instantly if your email or credentials have been compromised. If you find a match, change that password everywhere you have reused it and turn on multi-factor authentication wherever it is offered.