The UHQ MIX Part 4 Leak Gave Hackers 99,803 Working Logins

HEROIC analysts found a combolist titled "UHQ MIX PART 4 0930," uploaded by a Telegram user and dated May 7, 2023. The file contains 99,803 records pairing email addresses with plaintext passwords, along with the URLs of the sites those credentials were used on.

The UHQ MIX Part 4 Leak Gave Hackers 99,803 Working Logins

The "UHQ," or "ultra high quality," label used on lists like this one signals that the credentials have already been checked and are believed to be working logins, not stale or previously burned data. That means whoever holds this file has everything needed to log straight into 99,803 accounts, no guessing, no cracking, and no extra verification required.

What Was Exposed in This Leak

• Email addresses
• Plaintext passwords
• URLs tied to each set of credentials

Why This Matters for the 99,803 Accounts Involved

If your email is among these 99,803 records, an attacker already has a verified, working password for at least one of your accounts. Because so many people reuse passwords, that single working credential can be tested against your email, banking, or social media logins through credential stuffing, potentially leading to account takeover, identity theft, or financial fraud.

How This Combolist Was Assembled

A combolist compiles login credentials, usually gathered through malware, phishing, or earlier breaches, into a single file of email and password pairs. Lists marketed as "UHQ" are typically filtered and tested before release, which is why sellers on Telegram present them as premium, ready-to-use data rather than raw, unverified dumps. This makes them more valuable and dangerous, since buyers know most of the credentials inside still work.

Check If You Are Affected

With 99,803 records tied to this leak, checking your exposure is worth doing right away. HEROIC's free breach scanner searches your email against a database of more than 400 billion leaked records, including combolists like UHQ MIX Part 4, so you can find out if you are affected and secure your accounts before someone else logs in first.