900 Hotmail Accounts Exposed in 913X Telegram Stealer Leak

900 records. That's how many logins showed up in "913X Hotmail," a stealer log a Telegram user uploaded in June 2026. Each record pairs a Hotmail email address with a plaintext password and the URL of the login page it was pulled from.

Why This Is Dangerous

900 accounts is a small number compared to some of the larger dumps circulating on Telegram, but small does not mean harmless. This is not a case of Microsoft's Hotmail or Outlook systems being hacked. It is a batch of credentials that malware copied directly off infected users' own devices, and every single password in it is stored in plaintext, ready to use with no extra work by an attacker.

What Was Exposed

Each of the 900 records in "913X Hotmail" includes:

• Email addresses
• Plaintext passwords
• URLs showing the login page each credential came from

Why This Matters

A Hotmail or Outlook inbox is often the recovery point for banking, shopping, and social media accounts, so a compromised email login can open the door well beyond the inbox itself. Attackers commonly run small batches like this through credential stuffing tools, testing the same email and password against other sites in hopes the victim reused it. That can lead directly to account takeover, identity theft, or financial fraud for anyone caught up in this specific list.

How This Small Hotmail Stealer Log Was Collected

Stealer malware infects a device, often through a cracked program, fake installer, or malicious attachment, and then quietly reads saved passwords and login activity straight from the browser. The attacker behind "913X Hotmail" appears to have filtered the results down to Hotmail accounts specifically before packaging this smaller, targeted batch and posting it to a Telegram channel.

Check If You Are Affected

Even in a leak this size, your account could be one of the 900 exposed. HEROIC's free breach scanner checks your email address against a database of more than 400 billion leaked records, including stealer logs like this one, so you can find out in seconds if you were affected. Run a free scan now and change your password if it shows up.