USA 63 Combolist: 5,643 Passwords Leaked in Plaintext

USA 63 Combolist: 5,643 Passwords Leaked in Plaintext

HEROIC analysts identified a combolist titled "USA 63" that was uploaded by a Telegram user on 2 January 2023. The file contains 5,643 records of email addresses and plaintext passwords, along with associated URLs, tied to accounts in the United States.

Why This Is Dangerous

Because every password in this file is stored in plaintext, an attacker can use the credentials the moment they get the list, with no cracking or decryption needed. With over 5,600 working email and password pairs, someone could log directly into a large number of accounts and, if the victims reused those passwords elsewhere, spread the damage into completely unrelated services.

What Was Exposed

• Email Addresses
• Plaintext Passwords
• URLs

Why This Matters

A combolist of this size is built for credential stuffing, where automated tools test each of the 5,643 email and password pairs against banking, shopping, and social media sites at high speed. Because so many people reuse the same password across multiple accounts, this kind of leak can quickly escalate into account takeover, identity theft, or financial fraud well beyond the original data.

How Combolists Work

A combolist combines stolen usernames or email addresses with their matching passwords into a single file that criminals load directly into automated login software. These lists, often labeled by region like "USA 63" to signal their target country, are traded and resold on Telegram, giving buyers a ready-made batch of credentials to test against popular websites.

Check If You Are Affected

If you want to know whether your information is part of this leak, HEROIC's free breach scanner checks your email against a database of more than 400 billion leaked records. It only takes a moment to search, and if you are exposed, you can change your password right away.