425 Stolen Hotmail Logins Leaked in NINHO Private Log Dump

Two days after a similarly named file first appeared, a Telegram user uploaded a second stealer log labeled "NINHO Private Hotmail" on 16 June 2026, this time containing 425 stolen login records. Like the earlier file, it pairs email addresses with plaintext passwords and the URLs those passwords unlock. Despite the branding in the file's name, this is not a breach of Microsoft's Hotmail or Outlook infrastructure. It is a fresh batch of credentials harvested from infected devices and bundled for distribution on Telegram.

Why a Second NINHO Hotmail Dump Is a Bad Sign

When the same source uploads multiple stealer logs under a similar name within days of each other, it usually means the operation behind it is actively running malware campaigns and releasing new batches as they come in. A 425-record file is more than double the size of the first, suggesting the infection or collection method is either spreading or simply had a bigger harvest this round.

What Was Exposed in This 425-Record File

• Email addresses
• Plaintext passwords
• URLs identifying the login page tied to each password

Why This Matters Beyond a Single Inbox

Plaintext passwords tied to specific URLs are immediately usable, no cracking required. Criminals plug these pairs into credential stuffing tools that try the same email and password across hundreds of other sites, banking, shopping, streaming, social media, betting on the fact that people reuse passwords. That is how one leaked Hotmail login turns into a full account takeover, identity theft, or direct financial fraud.

How This Kind of Log Keeps Growing

Stealer log malware runs quietly in the background of an infected device, copying saved browser passwords, autofill fields, and login URLs, then sending the haul back to the attacker. Operators regularly repackage what they've collected into new files, which is why the same name, "NINHO Private Hotmail" in this case, can reappear days later with an updated, larger record count.

Check If Your Credentials Are in Either NINHO Leak

With two related dumps now circulating, checking your exposure matters more than ever. HEROIC's free breach scanner searches over 400 billion leaked records, including both NINHO Private Hotmail files, and shows you immediately whether your email and password have been exposed.