Discovered: 1,404 Hotmail Logins in a 2024 Telegram Dump

Digging through a Telegram channel dedicated to stolen credentials, researchers uncovered a file called “1.047 Hotmail,” uploaded in October 2024. Despite the name, the actual file contains 1,404 records of email addresses, plaintext passwords, and the URLs tied to each login. This is a stealer log, credentials pulled from infected devices rather than a breach of Microsoft’s own systems, and every one of those 1,404 accounts is now sitting in the hands of anyone who downloaded the file.

What the Discovery of the 1.047 Hotmail Log Revealed

The file’s name suggests a much larger haul than what it actually contains, but the real number that matters is 1,404 confirmed records, each one a working combination of email address, plaintext password, and the site the login belongs to. Small does not mean harmless. Every single one of those accounts is just as exposed as it would be in a leak a thousand times its size.

What Was Exposed in This Stealer Log

• Email addresses
• Plaintext passwords
• URLs identifying the accounts tied to each login

Why This Matters for Your Accounts

A plaintext password sitting next to your email address and the exact site it unlocks is about as ready-to-use as stolen data gets. Attackers do not need to crack anything, they simply try the combination directly, which opens the door to credential stuffing, account takeover, identity theft, and financial fraud if that password is reused anywhere else.

How Stealer Logs Like This One Get Built

Infostealer malware infects a device through a fake download, cracked software, or a malicious link, then quietly harvests saved browser passwords and autofill data before sending it back to the attacker. Smaller batches like this one are often carved out of larger stealer logs and uploaded separately, sometimes just to demonstrate that the data is real before a bigger sale.

Check If You Were Exposed in This Leak

Even a small stealer log can be the one that matters to you. HEROIC’s free breach scanner checks your email address against more than 400 billion leaked records, including small batches like this one. Run a free scan now, and if you are affected, change that password right away and enable two-factor authentication wherever it is available.