Check Your Email: 35k Hotmail Combolist Leaked 35,041 Passwords

HEROIC analysts found a combolist called 35k Hotmail shared on Telegram on August 28, 2026. The file holds 35,041 records pairing email addresses with plaintext passwords and the URLs those credentials were used on. Scan your email now to see if your address is one of them.

Because every password here is stored in readable text, an attacker does not need to crack anything before trying it. With the matching URL included, they also know exactly where to try it first, which makes successful logins far more likely than with stolen passwords alone.

What the 35k Hotmail File Contains

• Email Addresses: identifies the account owner for direct targeting.
• Plaintext Password: usable immediately with no cracking required.
• URLs: points to the exact site or service each password unlocks.

Why a Hotmail Focused List Is Risky

Email accounts are often used to reset passwords on other services, so a working Hotmail login can become a gateway into banking, shopping, or work accounts tied to that same inbox. With over 35,000 records involved, automated attempts against all of them at once are realistic. Once an attacker controls the inbox itself, they can intercept password reset emails for almost any other account linked to it, turning one exposed login into many.

How a Combolist Like This Is Put Together

Lists like this are built by collecting email and password pairs from smaller leaks or infected devices and combining them into one organized file that can be tested against sites at scale. The focus on one email provider simply reflects how this particular list was filtered, not that the provider itself was hacked.

Responding to the 35k Hotmail Leak

Scan your email to check your exposure. If your address turns up, change your password immediately, and change it anywhere else you reused the same one, starting from a device you trust. Do this for any work email tied to the same habits, not just your personal inbox.