306 Hotmail Accounts Leaked in itsivanmofo Combolist Dump

On August 18, 2025, a Telegram user going by "itsivanmofo" uploaded a combolist titled "306 HOTMAIL HITS," specifically targeting Hotmail accounts. HEROIC identified 306 records in the file, each pairing an email address with a plaintext password and a URL.

Why This Is Dangerous

Because the file focuses entirely on one email provider, an attacker doesn't need to guess where these credentials work, every entry is already labeled as a Hotmail login. Combined with plaintext passwords, that makes the list ready to use the moment someone downloads it.

What Was Exposed in This Hotmail Combolist

• Email addresses (Hotmail accounts)
• Plaintext passwords
• URLs tied to each credential pair

Why This Matters

A Hotmail inbox is often connected to years of account recovery emails, old receipts, and linked services. If any of these 306 accounts still use the leaked password, an attacker could take over the inbox itself and then use it to reset passwords on other accounts, turning one small leak into a much bigger problem.

How Combolists Work

Sellers often sort combolists by email provider, as seen here, because it makes the list more attractive to buyers who specialize in targeting a particular platform. The credentials themselves typically come from older breaches or stealer malware, then get filtered down to just the Hotmail addresses and repackaged for sale or trade on Telegram channels like this one.

Check If You Are Affected

If you use a Hotmail or Outlook account, it's worth checking your exposure directly. HEROIC's free breach scanner searches more than 400 billion leaked records so you can see in seconds whether your email appears in this or any other leak.