367 Hotmail Accounts Leaked in US Stealer Log: Check Now

On April 7, 2026, a stealer log file surfaced on Telegram containing 367 exposed records tied to Hotmail accounts belonging to users in the United States. The file, uploaded by a Telegram user distributing harvested credentials, included email addresses, plaintext passwords, and the URLs of the login pages where those credentials were captured. This is not a breach of Microsoft's own systems. It is a stealer log, meaning the data was pulled directly from malware-infected computers rather than stolen from Hotmail's servers.

Why This Hotmail Stealer Log Leak Is Dangerous

Stealer logs are especially risky because the passwords inside them are almost always current. Malware running on an infected device captures credentials the moment a person types them in, so unlike older breach dumps, this data reflects what victims are actually using right now. With only 367 records, this leak is small in scale, but every single record represents a real account with a working, unencrypted password sitting in the open for anyone to grab.

What Was Exposed

• Email addresses (Hotmail accounts)
• Plaintext passwords
• URLs of the sites where credentials were entered

Why This Matters

Because the passwords in this log are stored in plaintext, no cracking or decryption is needed. Anyone who obtains this file can immediately try logging into the affected email accounts. From there, attackers commonly attempt credential stuffing, testing the same email and password combination across banking, shopping, and social media sites, since so many people reuse passwords. A compromised Hotmail account can also be used to reset passwords on other services, opening the door to full account takeover, identity theft, and financial fraud.

How Stealer Log Malware Works

Stealer logs come from infostealer malware, malicious software that quietly installs itself on a victim's computer, often through a fake download, cracked software, or a phishing link. Once active, it scans the browser's saved passwords, autofill data, and active login sessions, then packages everything into a log file. These logs are frequently sold or shared for free on Telegram channels and dark web forums, which is exactly how this Hotmail-related file ended up circulating.

Check If You Are Affected

If you use a Hotmail or Outlook email address, it's worth finding out whether your credentials appear in this leak or any other breach. HEROIC's free breach scanner searches a database of more than 400 billion leaked records to show you instantly if your email or password has been exposed. Run a free check now and take the guesswork out of your online security.