If You Play Valorant, This 189,875-Account Combolist Should Worry You

In March 2023, HEROIC analysts identified a combolist file uploaded to a Telegram channel under the label "190K Valorant Userpass UHQ." HEROIC's analysis confirmed 189,875 actual records, each pairing an email address with a plaintext password and the URL of the account it belonged to, all tied to Valorant, the popular Riot Games shooter. Why This Is Dangerous Gaming accounts hold more value than many players realize, from purchased skins and in-game currency to linked payment methods and years of ranked progress. Because the passwords in this file are stored in plaintext, whoever holds it can log directly into these nearly 190,000 accounts without needing to crack anything. What Was Exposed Email addresses Plaintext passwords URLs of the accounts tied to each credential pair Why This Matters If you play Valorant, this leak is worth paying attention to even if your specific account was not the intended target. Attackers can hijack accounts to steal purchased items, sell them, or lock out the original owner. Worse, if the same email and password was reused on other sites, automated credential stuffing tools can use this list to break into banking, email, or shopping accounts too. How Combolist Breaches Work A combolist pairs email addresses or usernames with passwords, typically compiled from stealer logs, older breaches, or phishing campaigns targeting specific games or services. Sellers label these files with terms like "UHQ" (ultra high quality) to market them as reliable, then trade them on Telegram channels and dark web forums. Check If You Are Affected HEROIC's free breach scanner checks your email address against more than 400 billion breached records, including large combolists like this one. Run a free scan today to see if your credentials were exposed.