Dark Web Intel: 947 Hotmail Logins in the PieceHK UHQ 15 Dump

947 Hotmail Accounts Exposed in the "PIECEHK 15" UHQ Combolist

In June 2025, HEROIC analysts identified a combolist titled "PRIVATE HOTMAIL UHQ BY PIECEHK 15" circulating on Telegram. The file contained 947 records of Hotmail-linked email addresses paired with plaintext passwords and the URLs of the accounts they access, tied to United States users.

Why the "UHQ" Label on This Hotmail Dump Is a Warning Sign

"UHQ" stands for ultra high quality, a term sellers use to signal that every login in the file has already been checked and confirmed to work before it was shared. Combined with plaintext passwords and direct account URLs, that means the 947 Hotmail accounts in this dump are not just old, unverified data. They are logins someone has already tested and knows are live.

What Was Exposed in the 947-Record Hotmail Dump

• Hotmail and Outlook linked email addresses
• Plaintext passwords
• URLs tied to each account

Why This Matters Beyond These 947 Hotmail Accounts

A verified Hotmail login is valuable to attackers because email accounts are often the key to resetting passwords everywhere else. Anyone who reused this password on other services risks a chain reaction: attackers can use the Hotmail account to intercept password reset emails and take over banking, shopping, and social media accounts, leading to identity theft and financial fraud.

How UHQ Combolists Like PIECEHK 15 Are Assembled

UHQ combolists are built by taking raw stolen credentials, usually pulled from stealer malware or older breaches, and running them through automated checker tools that attempt to log into each account. Only the logins that succeed, the ones considered valid or high quality, make it into the final file. That extra verification step is what sellers like PIECEHK use to market their dumps as more valuable on Telegram, since buyers know the credentials are more likely to work.

Check If Your Hotmail Account Was in This Dump

If you use a Hotmail or Outlook account, it is worth checking whether your login is one of the 947 records in this dump. HEROIC's free breach scanner searches a database of more than 400 billion leaked records, so you can find out in moments and reset your password before anyone else uses it.