Use Have I Been Pwned to see if your email has appeared in recent "combolists" or breaches.
If you believe your information may be included in such a leak: 1.2M Shopping Combolist [ HQ ].txt
Critical. If your credentials are in this list, any account sharing that password is at immediate risk of takeover. Immediate Recommendations Use Have I Been Pwned to see if
Turn on Multi-Factor Authentication (SMS, App, or Security Key) on all supported platforms. This is the most effective defense against combolist attacks. Use a unique, complex password for every site
Change passwords for all major shopping and financial accounts. Use a unique, complex password for every site.
It contains approximately 1.2 million entries formatted for automated tools. The "[HQ]" (High Quality) tag suggests the list has been filtered to remove invalid formats or that it boasts a high "hit rate" on e-commerce sites.
Threat actors use these lists to hijack accounts on shopping platforms (like Amazon, eBay, or Walmart) to steal saved credit card info, reward points, or perform brushing scams.