Inside the 5873PublicHotmail Combolist: 5,134 Hotmail Logins Exposed

HEROIC analysts found a combolist named 5873PublicHotmail uploaded to a Telegram channel on 13 May 2026. The file contained 5,134 records pairing Hotmail-linked email addresses with plaintext passwords, along with associated URLs for the accounts involved.

Why This Is Dangerous

Because the passwords in this combolist are stored in plaintext, anyone who downloads the file can read all 5,134 email and password pairs immediately, with no cracking or technical skill required. A compromised Hotmail account can also be used to reset passwords on other services linked to that same email address.

What Was Exposed

• Email Addresses
• Plaintext Passwords
• URLs

Why This Matters

Because many of these accounts are Hotmail email addresses, a compromised login can act as a gateway to other accounts tied to that inbox, such as banking or shopping sites that use email-based password resets. Attackers commonly load lists like 5873PublicHotmail into automated tools to run credential stuffing attacks, testing the same email and password combination across multiple platforms. Anyone who reused a password tied to one of these accounts faces a heightened risk of takeover, fraud, or identity theft.

How Combolists Work

A combolist pairs email addresses or usernames with matching passwords in a simple text file, one record per line. Rather than being pulled fresh from an infected device, combolists like 5873PublicHotmail are usually compiled from earlier leaks or scraped credentials, then repackaged and shared or sold on Telegram channels and dark web forums. Lists built around a specific email provider, like Hotmail, are common because they make it easy for attackers to target accounts with a shared trait.

Check If You Are Affected

If you use a Hotmail address or have reused a password across multiple accounts, it is worth checking your exposure now. HEROIC's free breach scanner searches more than 400 billion leaked records, including combolists like 5873PublicHotmail, so you can find out quickly and secure any accounts that may be at risk.