Search Your Email: US 2 1 Combolist Leaked 9,711 Records

US 2 1 Combolist Exposes 9,711 Email and Password Records

HEROIC analysts identified a combolist labeled "us 2 1" uploaded to a Telegram channel on May 17, 2026. The file contains 9,711 records pairing email addresses with plaintext passwords, along with URLs pointing to the sites each credential unlocks.

Why This Is Dangerous

With 9,711 email and password pairs in one file, this is a large enough list to power automated attacks rather than one-off account break-ins. Because the passwords are stored in plaintext, no cracking or extra tools are needed. An attacker can simply load the list into a script and start testing every pair against dozens of websites at once.

What Was Exposed

• Email addresses
• Plaintext passwords
• Associated URLs

Why This Matters

A list of this size is exactly what powers credential stuffing at scale, where attackers automate login attempts across banking, retail, and social media sites using stolen email and password pairs. Anyone among the 9,711 affected records who reused a password elsewhere is at risk of account takeover on those other services too. Once an attacker gets into an email account, resetting passwords on connected accounts becomes easy, opening the door to identity theft and financial fraud.

How This Combolist Was Assembled

Combolists like this one are typically built by combining email and password pairs pulled from earlier data breaches, malware infections, or phishing campaigns, then packaged into a single text file and shared on Telegram or hacking forums. A file of 9,711 records suggests multiple smaller sources were merged together rather than a single point of compromise, which is common practice among the people who trade these lists.

Check If You Are Affected

Search your email against this leak and thousands of others using HEROIC's free breach scanner. It checks your address against a database of more than 400 billion leaked records and tells you in seconds if your credentials are exposed. Run a free scan now, and change any password tied to an account you find compromised.