8,399 Hotmail Logins Exposed in Telegram Stealer Log Leak

8,399. That's the record count HEROIC's team found inside a stealer log dated 21-06-25, uploaded to Telegram and centered heavily on hotmail.com accounts. It's not the biggest leak on record, but for the 8,399 people whose credentials ended up inside, the size of the file doesn't matter much.

Why This Is Dangerous

Hotmail accounts often double as a recovery method for alot of other services, banking apps, shopping sites, social media, you name it. A plaintext password sitting next to a Hotmail address and the URL it was used on gives an attacker a straight shot at the inbox that controls password resets for practically everything else a person owns.

What Was Exposed

• Email Addresses (largely hotmail.com)
• Plaintext Passwords
• URLs linking each credential to its source site
• 8,399 total records exposed

Why This Matters

It would be easy to assume a leak of 8,399 records is too small to worry about, but that's not exactly true. Each record represents someone's real inbox, real passwords, and real risk of having other accounts hijacked through password reset emails. Size definitly matters less here than what kind of account got exposed.

How Stealer Logs Work

This particular log was built the same way most stealer logs are, malware infects a device, quietly scrapes saved browser passwords and cookies, and reports back to whoever is running the operation. The Hotmail focus in this file suggests the operator either filtered results afterward or simply happened to recieve a batch of infected devices that leaned heavily toward Hotmail users.

Check If You Are Affected

If you use a Hotmail or Outlook account, it's worth taking two minutes to check whether your details showed up in this leak or any other. HEROIC's free breach scanner searches more than 400 billion exposed records, so you can see your results instantly and update your password before anyone takes advantage of it.