Almost 3 Years Later: Outlook.com Leak Hits 73,013 Users

Some leaks take years to surface publicly, and this is one of them. A stealer log tied to outlook.com, originally captured on August 9, 2023, was only recently uploaded to a Telegram channel where HEROIC's monitoring picked it up. Almost three years have passed since the data was harvested, yet it still holds 73,013 full records of emails, plaintext passwords, and URLs.

Why This Is Dangerous

Old does not mean safe. Plenty of people keep the same password for years, wich means a credential stolen in 2023 can still open the door to an account today. Because these passwords were stored in plaintext rather than hashed, anyone who gets ahold of this file can try logging in right away, no cracking or guessing required.

What Was Exposed

This stealer log, containing 73,013 records dated back to August 2023, includes:

• Email Addresses
• Plaintext Passwords
• URLs

Why This Matters

The gap between when data is stolen and when it becomes public is often used by criminals to quietly test and exploit it before anyone notices. By the time a file like this makes its way to a wider Telegram audience, it may have already changed hands several times. Anyone in this batch of 73,013 who has not updated their outlook.com password since 2023 should act imediately, since there is no way to know how many people already have a copy.

How Stealer Logs Work

Stealer logs come from malware planted on a victim's computer, often through pirated downloads or malicious links, that silently records login activity in the browser. It captures the site address, the username, and the password as they are typed, then sends the whole package back to the attacker. Files can sit unused in private collections untill they are eventually uploaded to public channels like the one where this leak was found.

Check If You Are Affected

Even a leak from years ago deserves a fresh look today. HEROIC's free breach scanner checks your email against a database of more than 400 billion leaked records, old and new, so you can find out right now whether your outlook.com credentials, or any others, need to be changed.