1,114 Passwords Leaked: Inside the Fresh Hotmail Combolist

HEROIC analysts found a combolist branded "1114X Fresh Hotmail" uploaded to a Telegram channel on March 16, 2026, containing 1,114 confirmed records of email addresses and plaintext passwords tied to Hotmail accounts. Each record pairs a login with a password and a related URL, giving anyone who finds the file everything needed to attempt access right away.

Why This Is Dangerous

Because the passwords in this combolist were captured and shared in plaintext, an attacker does not need to crack or guess anything. The 1,114 credentials can be loaded straight into automated login tools and tested against Hotmail, Outlook, and any other service where a victim might have reused the same password.

What Was Exposed

• Email addresses
• Plaintext passwords
• Associated URLs

Why This Matters

A combolist of this size is a prime target for credential stuffing, where attackers run every email and password pair against banking sites, shopping accounts, and social media platforms to see which still work. Anyone among these 1,114 people who reused their Hotmail password elsewhere risks account takeover, and from there, identity theft or financial fraud.

How Combolists Work

A combolist is a plain text file pairing email addresses or usernames with passwords, usually compiled from older breaches, phishing pages, or malware infections and repackaged for distribution on Telegram. Labels like "1114X Fresh" are meant to signal that the data has not yet been widely circulated, making it especially valuable to attackers since victims have had little chance to change their passwords.

Check If You Are Affected

If you use Hotmail, Outlook, or a similar email service, it is worth checking whether your credentials appear in this leak or any other. HEROIC's free breach scanner searches more than 400 billion leaked records, so you can find out quickly and change any passwords you may have reused elsewhere.