7,137 Email Addresses Exposed in the 7574x Hotmail Leak

HEROIC analysts identified this stealer log on 07-Oct-2025. The breach exposed 7,137 records, with stolen data including email addresses, plaintext passwords, and URLs. The source is identified as 7574x hotmail_removed_duplicates_sorted_az uploaded by a Telegram User.

Why This Is Dangerous

This breach contains 7,137 deduplicated Hotmail email addresses paired with plaintext passwords. The fact that duplicates were removed suggests the data was curated and refined for use in targeted credential attacks. Plaintext passwords mean attackers can begin attempting logins on Hotmail and any other service where victims reuse the same password.

What Was Exposed

• Email Addresses
• Plaintext Passwords
• URLs

Why This Matters

A curated list of unique Hotmail credentials is particularly dangerous because each record is a verified, usable login. Criminals use these lists to take over email accounts and then pivot to banking, social media, and government accounts linked to the same email address. Victims face identity theft, financial fraud, and the challenge of recovering multiple compromised accounts at once.

How Stealer Logs Work

Stealer logs are created when infostealer malware infects a victim's computer. The malware is commonly spread through phishing emails, malicious file attachments, and cracked software available on file-sharing sites. Once active, it captures saved passwords, login credentials, and the URLs of sites the user visits. Criminals collect these logs, remove duplicates, and distribute the cleaned lists through private Telegram channels and dark web forums.

Check If You Are Affected

HEROIC offers a free breach scanner that searches 400 billion records. Search your email address now to find out if your credentials appear in this breach or others. Free, takes seconds.