855x UHQ Hotmails Uploaded by a Telegram User: Passwords Exposed

A Telegram Combolist Just Exposed 854 Hotmail Accounts

HEROIC analysts identified a combolist titled "855x UHQ Hotmails" that was uploaded to a Telegram channel on 28 June 2026. The file contains 854 records pairing email addresses with plaintext passwords, along with associated URLs, giving anyone who downloads it a ready-made list of working Hotmail login credentials.

Why This Is Dangerous

Because the passwords in this file are stored in plaintext, anyone who obtains the list can log straight into the affected Hotmail accounts without needing to crack or guess anything. If a victim reused that same email and password combination on other sites, an attacker can try the same credentials elsewhere and potentially break into banking, shopping, or social media accounts too.

What Was Exposed

• Email addresses
• Plaintext passwords
• Associated URLs

Why This Matters

Combolists like this one are a favorite tool for credential stuffing attacks, where automated scripts test stolen email and password pairs against dozens of popular websites in seconds. If you used your Hotmail login and password on any other account, this leak could be the first step toward a full account takeover, unauthorized purchases, or identity theft.

How a Combolist Leak Works

A combolist is simply a compiled file of "combo" entries, username or email paired with a password, gathered from earlier breaches, malware infections, or phishing campaigns and then repackaged for resale or free distribution. Threat actors often trade these lists on Telegram channels because it is fast, low cost, and hard to trace. Once a combolist is public, it can be downloaded by anyone, from opportunistic scammers to more organized criminal groups running large-scale credential stuffing operations.

Check If You Are Affected

If you use a Hotmail or Outlook account, or if you have ever reused a password across multiple sites, it is worth checking whether your information appears in this leak. HEROIC's free breach scanner searches a database of more than 400 billion leaked records to tell you instantly if your email has been exposed, so you can change vulnerable passwords before someone else uses them first.