The Uzbekistan 2 Combolist Dump Leaked 32,228 Passwords and Emails

HEROIC analysts identified a combolist file labeled "Uzbekistan 2" that a Telegram user uploaded on February 18, 2023. The file contains 32,228 records pairing email addresses with plaintext passwords, along with URLs showing which sites each login was tied to.

Why This Is Dangerous

Every password in this file is stored in plaintext, meaning there is no encryption for an attacker to break through. Combined with the attached URL for each record, an attacker knows exactly which site a credential belongs to and can attempt to log in immediately, no cracking or guesswork required.

What Was Exposed

• Email addresses
• Plaintext passwords
• URLs linking each credential to the site it was used on

Why This Matters

Combolists like this one power credential stuffing attacks, where automated tools rapidly test each email and password pair against banking sites, email providers, and online retailers. Because so many people reuse the same password across services, one exposed credential can open the door to account takeover, identity theft, and financial fraud on accounts that have nothing to do with the original breach.

How a Combolist Like This Is Assembled

A combolist strips a data leak down to its most usable parts, just the username or email and password pairs, usually collected from older breaches, stealer logs, or other leaked sources and combined into a single file. That bare-bones format is what makes it dangerous, since it loads directly into automated login tools without extra work. Telegram channels remain a common place for files like this to be shared and traded.

Check If You Are Affected

If you think your email address might be part of this combolist or a similar leak, HEROIC's free breach scanner checks your information against a database of more than 400 billion compromised records. Run a scan and change any password you have used on more than one account.