The white0storme Tubi Leak Puts 827 Streaming Accounts at Risk

What HEROIC Analysts Found HEROIC analysts identified a combolist labeled 827 Tubi Accounts By white0storme, originally leaked on 23 December 2022 and uploaded to Telegram. The file contains 827 records, each pairing an email address used to log into Tubi with a plaintext password and a related URL. Why This Is Dangerous Tubi is a streaming service, but the email and password pair tied to a Tubi account rarely stays confined to Tubi. Most people reuse the same login across multiple sites, so this leak can act as a stepping stone into email, shopping, or even financial accounts if the password was used more than once. What Was Exposed 827 email addresses used for Tubi accounts Plaintext passwords for each account URLs tied to each login Why This Matters Attackers do not care that this leak started with a streaming account. They run these credentials through credential stuffing tools that test the same email and password against banking sites, email providers, and social media. If the chain connects, a single reused password can unlock far more than a Tubi login, exposing the victim to account takeover and identity theft. How This Combolist Was Compiled Combolists tied to a single service, like this one built around Tubi accounts, are usually harvested through phishing pages, malware-infected devices, or by testing credentials from older breaches against the platform. The uploader, using the handle white0storme, packaged the working accounts into one file and shared it on Telegram. Check If You Are Affected If you have a Tubi account, or reused its password anywhere else, it is worth checking whether your details are part of this leak. HEROIC's free breach scanner searches more than 400 billion exposed records to give you a fast answer, so you can update any passwords you have not changed since 2022.