Your Data May Be Exposed: 99K UHQ Aol Base Leak Hit 99,130 Accounts

HEROIC analysts identified a combolist labeled 99K UHQ Aol Base circulating on Telegram, first surfacing on February 11, 2023. The file contains 99,130 records pairing email addresses with plaintext passwords, along with URLs pointing to the login pages where each credential pair applies. The "UHQ," or ultra high quality, label in the file name signals that the credentials have already been checked and are believed to still work.

Why the 99K UHQ Aol Base Leak Is Dangerous

Because these passwords are stored in plaintext and marked as verified working logins, anyone who downloads this file can immediately try each credential pair without needing to crack or decode anything. With over 99,000 accounts included, this is a large enough set for automated attack tools to run through efficiently.

What Was Exposed in This Combolist

• Email addresses
• Plaintext passwords
• URLs linked to each set of login credentials

Why This Matters for the 99,130 Accounts Involved

Combolists marked as UHQ are prized by attackers precisely because they are pre-verified, which makes credential stuffing far more efficient. If anyone in this set of 99,130 people reused their email and password combination on a bank, shopping site, or work account, that account is exposed to takeover right now. From there, attackers can commit financial fraud, steal an identity, or use a compromised email to reset passwords on other services.

How UHQ Combolist Leaks Like This One Work

A combolist compiles working username or email and password pairs, often pulled from older breaches, phishing kits, or malware and then tested in bulk to filter out logins that no longer work. What remains, the "ultra high quality" portion, is packaged and shared on Telegram channels specifically because it is more valuable to buyers than an unverified list. That verification step is what makes files like this one especially dangerous compared to a random, untested dump.

Check If You Are Affected by the 99K UHQ Aol Base Leak

HEROIC's database holds more than 400 billion breached and leaked records, including combolists like this one. Run a free scan with HEROIC's breach checker to find out if your email address is part of this 99,130-record leak or any other exposure, and get direct guidance on which passwords need to change.