3,865 Passwords Exposed: Inside the Hotmail Fresh B4_Jx Log

3,865 records surfaced in late April 2026 when HEROIC analysts identified a stealer log dump called "Hotmail Fresh B4_Jx," uploaded to a Telegram channel by an anonymous user. The exposed data, tied to United States based accounts, included email addresses, plaintext passwords, and the URLs of the sites those credentials were used on.

Why This Is Dangerous

A file this size gives an attacker thousands of ready-to-use logins in one download. Because the passwords are stored in plaintext and matched to the exact site each one was used on, there is no cracking involved. An attacker can move straight from downloading the file to logging in with stolen credentials.

What Was Exposed

• Email addresses
• Plaintext passwords
• URLs of the associated login sites

Why This Matters

With 3,865 credential pairs in a single file, this dataset is large enough to fuel automated credential stuffing campaigns against email providers, banks, and shopping sites, especially where people reused passwords across accounts. A compromised email account can be particularly damaging, since it often allows an attacker to reset passwords on other services and expand a single leak into broader identity theft or financial fraud.

How Stealer Logs Work

Stealer logs are the product of infostealer malware, which infects a device through pirated downloads, cracked software, or malicious attachments, then silently collects saved usernames, passwords, and browsing URLs from the browser. The resulting file is often shared on Telegram channels or dark web forums, exactly as this one was, giving other criminals a large batch of working credentials to exploit.

Check If You Are Affected

With thousands of records in this leak, the chance that your information is included is real. HEROIC's free breach scanner checks your email address against a database of more than 400 billion leaked records, including this stealer log. Run a search now and change any exposed passwords right away.