Good Mix Hotmail Leak: 26,285 Email Logins Could Be Compromised

HEROIC analysts found a stealer log dataset labeled "Good Mix Hotmail," uploaded to a Telegram channel on May 22, 2025. The file contains 26,285 records made up of email addresses, plaintext passwords, and the URLs of the sites those credentials were used on, with the naming suggesting a concentration of Hotmail and Outlook accounts.

Why This Is Dangerous

Email accounts are the master key to a person's digital life. Whoever compiled this "good mix" batch has already confirmed the credentials work, meaning an attacker can log directly into thousands of inboxes. From there, they can read private messages, find other accounts tied to that email, and use the "forgot password" option on banking or shopping sites to take over even more accounts.

What Was Exposed

• Email addresses
• Plaintext passwords
• URLs of the sites the credentials were used on

Why This Matters

With 26,285 working email and password pairs in plaintext, the immediate risk is direct account takeover of those inboxes. Because email is often used to reset passwords elsewhere, a compromised inbox can quickly lead to further account takeover on banking, shopping, or social media platforms, and any reused passwords make credential stuffing attacks even easier to pull off.

How Stealer Logs Work

Stealer logs originate from infostealer malware that infects a device through phishing emails, cracked software, or malicious downloads. Once active, it silently harvests saved browser passwords, autofill data, and active sessions, then bundles the results into a log file. In this case, the file was further sorted and labeled "good mix hotmail," indicating the credentials were tested and organized by email provider before being shared on Telegram.

Check If You Are Affected

If you use a Hotmail, Outlook, or similar email account, it's worth checking whether your credentials appear in a leak like this one. HEROIC's free breach scanner searches a database of more than 400 billion exposed records to give you an instant answer and clear next steps.