Combo List - 4M-ZA data breach

During 2026 a combo list text file containing 3.7 million e-mail addresses and passwords were released on various hacker forums and on social media platforms. The file was titled 4M-ZA. It is currently unclear where the list originated, whether the passwords are for accessing the e-mail accounts or perhaps a total different service. The passwords in the file was stored in plain text format.

While the list claims to contain information on South Africans, we cannot confirm this claim on all records. As with all combo lists, this may include records from other countries as well.

Why Combo Lists are Important

While most combo lists usually only contains a username, password or an e-mail address, many hackers make use of these lists to identify previous passwords used by people and they will try using the old passwords to access accounts.

We recommend you take the following precautions:

1. Immediately change all your passwords for your current services you use, even more so if you make use of old passwords.

2. Download Google or Microsoft Authenticator on your mobile device. Where allowed, on every website, activate 2FA as an additional layer of security.

3. Download and make use of a proper anti-virus program, such as Eset to protect all your devices.