Urgent: 961,517 Hotmail Logins Leaked in Combo Mix Dump

On June 8, 2026, a massive combo list titled "966K HOTMAIL COMBO MIX GEOJUNE-26" was uploaded to a Telegram channel by an anonymous user. The actual file contains 961,517 sets of stolen credentials tied to Hotmail and Outlook email accounts, including email addresses, plaintext passwords, and the URLs of the login pages those credentials open. This is not a breach of Microsoft's own servers. It is a stealer-log credential harvest, meaning the data was pulled from the personal devices of Hotmail and Outlook users after those devices were infected with information-stealing malware, then bundled together and shared on Telegram.

Why You Need to Act on This Now

This is one of the largest stealer log dumps seen recently, with 961,517 individual credential sets in a single file. Because the passwords were captured in plaintext, they are usable the instant someone downloads the list, with no cracking, guessing, or extra work required. A file this size spreads fast once it hits Telegram, so the window to change an exposed password before someone else uses it first is shrinking by the day.

What Was Exposed in the Hotmail Combo Dump

• Email addresses (Hotmail and Outlook accounts)
• Plaintext passwords
• URLs identifying the login page each credential belongs to

Why This Matters for Hotmail and Outlook Users

An email inbox is often the key to everything else online. Someone with a working Hotmail or Outlook login can trigger password resets on banking, shopping, and social media accounts linked to that address. Criminals also run stolen credentials like these through automated credential stuffing tools, testing the same email and password pair across other sites. Because so many people reuse passwords, one exposed login can quickly turn into account takeover, identity theft, or financial fraud far beyond the original inbox.

How a Combo List This Large Gets Built

Stealer malware usually reaches a device through a fake download, cracked software, or a malicious attachment. Once installed, it quietly copies saved passwords, autofill data, and browser session details, then sends everything back to the attacker. Logs from hundreds of thousands of infected devices are eventually merged, filtered down to a single email provider like Hotmail, and packaged into one large file so criminals can target that group of users at scale.

Check If You Are Affected

HEROIC's free breach scanner searches more than 400 billion leaked records, including large stealer log dumps like this one, to show you in seconds whether your email address has been exposed. Run a free scan now to find out if your Hotmail or Outlook login is part of this leak and get clear steps to secure your account immediately.