110 Hotmail Accounts Leaked With Plaintext Passwords Exposed

On April 21, 2026, a Telegram user uploaded a combolist labeled "Hotmail Fresh B4_Jx," containing 110 sets of login credentials tied specifically to Hotmail and Outlook accounts. Each record pairs an email address with a plaintext password and the URL it was used on, giving anyone who downloads the file a direct list of Microsoft account logins to test.

Why the Hotmail Fresh B4_Jx Leak Is Dangerous

Targeting Hotmail accounts specifically makes this combolist more dangerous than a generic mixed list. A Hotmail or Outlook inbox is often the recovery email for banking apps, social media, and other online accounts, so gaining access to it can hand an attacker the keys to reset passwords everywhere else. Criminals specifically hunt for webmail-focused combolists like this one because a single email account can unlock a much wider chain of accounts.

What Was Exposed in the Hotmail Fresh B4_Jx Leak

• Hotmail and Outlook email addresses
• Plaintext passwords
• URLs tied to each login

Why This Matters

If your Hotmail address is among these 110 records, the risk goes beyond your inbox. Attackers who gain access to a primary email can use its "forgot password" links to take over other services, from social media to online banking. A compromised webmail account is often the first domino in a much larger takeover.

How Combolists Work

Combolists like this one are built by pulling email and password pairs from older breaches, phishing pages, and malware infections, then organizing them by provider or theme, in this case Hotmail. Once assembled, criminals share or sell the file on Telegram, where others use automated tools to try each login on Microsoft's sign-in page and anywhere else the email might be reused.

Check If You Are Affected

If you use a Hotmail or Outlook account, it's worth checking now rather than waiting for a problem to show up. HEROIC's free scanner searches more than 400 billion leaked records, including combolists like Hotmail Fresh B4_Jx, so you can see right away if your email and password have been exposed.