Is Your Login Among the 27,612 Leaked From srilanka.com?

27,612 logins tied to the domain srilanka.com surfaced on Telegram in August 2019, every password stored as readable plaintext and paired with an email address and login URL. The name in question is simply the domain string itself, this report covers the file's contents, nothing more.

Why the Question Is Worth Asking

With over 27,000 records in plaintext, the odds that any one email address is included are not small. Since these passwords need no cracking, the window between a file surfacing and it being used against other accounts can be very short.

What srilanka.com Logins Actually Include

• Email addresses: the usernames tied to each password record.
• Plaintext passwords: readable text, usable the moment the file is opened.
• URLs: the srilanka.com login page each credential pair points to.

What a Yes Answer Means for You

If your login shows up here and the password has been reused elsewhere, that other account is exposed to credential stuffing, automated attempts using this exact email and password combination against other popular sites. One leaked pair can put several accounts at risk at once.

Why This Is Called Logins, Not a Site Breach

This file is classified as a combolist, meaning it was compiled from existing credential sources by domain rather than pulled directly from srilanka.com's own systems in a confirmed intrusion.

Find Out if You Are in the srilanka.com File

Scan your email to get your answer immediately. If it turns up, change that password right away on every site where you reused it, and give each account a password of its own going forward. This applies to work email addresses just as much as personal ones.