Epic Games Store Logins Exposed in Hotmail Combolist Breach

HEROIC analysts logged a combolist called hotmail 2 2_hits_storeepicgames.com, uploaded to Telegram on 13-Dec-2024. The file holds 22 confirmed records, each a Hotmail email address paired with a plaintext password tied to the Epic Games Store's account notifications.

Why This Is Dangerous

Because these 22 credentials were already tested and confirmed before this file was posted, an attacker gets guaranteed access without any extra effort. That means real Hotmail inboxes, and the Epic Games Store accounts linked to them, are sitting open for whoever picks up this list.

What Was Exposed

• Email addresses
• Plaintext passwords
• URLs tied to Epic Games Store notifications

Why This Matters

Store accounts like Epic Games often hold saved payment methods and a library of purchased games, making them a valuable target for credential stuffing. A hijacked Hotmail login can lead directly to account takeover on the linked store account, unauthorized purchases, and identity theft if the same password protects other services.

How Combolist Breaches Work

This combolist was built by running previously stolen email and password pairs through an automated checker aimed specifically at Epic Games Store's notification system, keeping only the pairs that logged in successfully. The 22 confirmed hits that remain are exactly what buyers on Telegram look for: a small, targeted, ready to use list.

Check If You Are Affected

If you use Hotmail for your Epic Games Store account, it is worth confirming whether your credentials appear in this leak. HEROIC's free breach scanner checks your email against more than 400 billion leaked records, giving you a clear answer in seconds so you can update your password before it is used against you.