2,748 Hotmail Logins Leaked in Telegram Stealer Log Dump

In December 2024, someone uploaded a stealer log file to a Telegram channel, exposing 2,748 records tied to Hotmail accounts. The file contained email addresses, plaintext passwords, and the URLs of the login pages where those credentials were captured, and it was shared publicly as "fresh hits" for the channel's subscribers, meaning the stolen logins were being actively passed around to other criminals.

This is not a breach of Microsoft's Hotmail or Outlook systems. It is a stealer log, a batch of credentials pulled from malware-infected devices whose owners happened to have Hotmail accounts saved in their browser.

Why This Stealer Log Is Dangerous

Every password in this log was stored and shared as plain, readable text. There is no encryption to break and no hash to crack. Anyone who downloads the file can immediately try each email and password combination against Hotmail, Outlook, and any other site the victim used.

What Was Exposed

• Email addresses (Hotmail accounts)
• Plaintext passwords
• URLs of the login pages where the credentials were captured

Why This Matters for You

Stolen email credentials open the door to far more than your inbox. Criminals use lists like this one for credential stuffing, testing the same email and password against banking, shopping and social media accounts, since so many people reuse passwords across sites. A compromised Hotmail account can also be used to reset passwords elsewhere, leading to account takeover, identity theft and financial fraud.

How Stealer Logs Like This One Work

Stealer malware infects a device, often through a fake download, cracked software or a malicious email attachment, then quietly scrapes saved passwords, autofill data and browser cookies. The results are packaged into a log file and sold or given away in Telegram channels like the one behind this leak, where buyers sort through the data looking for accounts worth exploiting.

Check If You Are Affected

With over 400 billion compromised records in HEROIC's database, checking your exposure takes seconds. Run your email address through HEROIC's free breach scanner to see if your Hotmail account, or any other account, shows up in this leak or another one, then change any reused passwords right away.