The HOTMAIL 1 Combolist Leaked in 2022. 73,961 Logins Are Now Public.

HEROIC analysts identified a combolist known as HOTMAIL 1 circulating on Telegram, tracing back to an original upload from December 2022. The file contains 73,961 records pairing email addresses with plaintext passwords and the website URLs they were used on, meaning the credentials have now been sitting in criminal hands for more than three years. Why This Is Dangerous: Because the passwords in this file are stored in plaintext, no cracking or decryption is required. Anyone who downloads the HOTMAIL 1 combolist can immediately try each email and password pair against other websites. If you used the same password anywhere else in 2022 and haven't changed it since, that account is still exposed today. What Was Exposed in the HOTMAIL 1 Leak: Email addresses. Plaintext passwords. The URLs each login was associated with. Why This Matters: Combolists like this one are the raw material behind credential stuffing attacks, in which automated tools test stolen email and password pairs against banking, shopping, and social media sites at scale. Because the URLs are included alongside the credentials, attackers already know which sites to target with each stolen login, making account takeover faster and more precise. How Combolists Like This Are Built: A combolist is a compiled list of username or email and password pairs gathered from multiple older breaches, malware infections, or phishing campaigns and repackaged into a single file. Telegram has become a common distribution point for these files because channels are easy to create, hard to fully shut down, and let sellers reach buyers directly. The HOTMAIL 1 file appears to follow that pattern: previously leaked credentials collected and reposted years after the original exposure. Check if You Are Affected: If you have ever used a Hotmail or Outlook address with a password you've reused elsewhere, it's worth checking whether your information appears in this leak. HEROIC's free breach scanner searches a database of more than 400 billion leaked records, including combolists like this one, so you can find out in seconds and take action before someone else does.