U.S. Users Exposed in the datacontrol.com.br Password Leak

The datacontrol.com.br Leak: A Closer Look at Who Was Exposed

HEROIC analysts identified a combolist labeled "datacontrol.com.br - 1.097 emails," uploaded to a Telegram channel and dated 10-Jun-2026. The file contains 1,097 records tied to U.S. users, each pairing an email address with a plaintext password and a URL linked to the account.

Why U.S. Users in This datacontrol.com.br File Are at Risk

Every password in this file is stored in plaintext, so anyone who opens it can read your login immediately. Because the records are tied to U.S. users specifically, attackers can target this group with follow-up scams that reference familiar U.S. services, banks, or institutions to seem more convincing.

What Was Exposed From datacontrol.com.br

• Email addresses
• Plaintext passwords
• URLs tied to each account

Why This Regional Leak Still Puts You at Broader Risk

A password exposed in one region rarely stays contained to one account. If you reused this password on other services, criminals can run it through credential stuffing tools against email providers, banks, and social platforms anywhere, leading to account takeover, identity theft, and financial fraud.

How This Combolist Was Likely Put Together

Combolists like this one are built by collecting email and password pairs, often tied to a specific site or user base, and packaging them into a single file for distribution. Naming the file after datacontrol.com.br suggests the credentials were pulled from or associated with that source before being shared on Telegram.

Check If You Are Affected

Want to know if your email is one of the 1,097 records in this leak or appears in another breach? HEROIC's free breach scanner checks your address against a database of more than 400 billion exposed records. Run a free scan now to find out.