Search Your Inbox: The “5K Hotmail Access” Leak Exposed 4,775 Logins

HEROIC analysts identified a combolist titled "5K Hotmail Access" that a Telegram user uploaded on January 29, 2025. Despite the "5K" in its name, the file actually contains 4,775 verified records pairing email addresses with plaintext passwords and the login URLs tied to them. Why This Is Dangerous: These are Hotmail and Outlook-style email logins stored in plain, readable text. Email accounts are often the master key to a person's digital life, anyone with access can reset passwords on banking, shopping, and social media accounts just by requesting a password reset email. What Was Exposed: - Email addresses (Hotmail/Outlook-style accounts) - Plaintext passwords - URLs for the associated login pages Why This Matters: If an attacker gets into your email account, they can lock you out, read your private messages, and use "forgot password" links to break into nearly every other account tied to that inbox. That makes email combolists like this one especially valuable to attackers running credential stuffing and account takeover campaigns. How a Combolist Like This Works: Files like this are typically compiled from older breaches, phishing kits, or malware that specifically target free webmail accounts because they unlock so many other services. Once collected, they are packaged and shared on Telegram, often mislabeled with rounded numbers like "5K" even when the real count is lower. Check If You Are Affected: Search your email address against this leak and HEROIC's full database of more than 400 billion exposed records using HEROIC's free breach scanner. If your Hotmail or Outlook account shows up, change the password immediately and enable two-factor authentication.