Dark Web Intel: 1,134 Hotmail Credentials From the 18.06 Dump

In mid-June 2026, HEROIC threat intelligence analysts identified a stealer log file uploaded to Telegram under the name "Hotmail 18.06," containing 1,134 records tied to Hotmail and related Microsoft accounts. The date in the filename appears to mark when the data was collected or uploaded. The file includes email addresses, plaintext passwords, and the URLs of the login pages each credential belongs to.

Why This Hotmail-Specific Batch Is Notable

Rather than a mixed bag of random accounts, this file appears to have been filtered specifically for Hotmail and Microsoft logins. That kind of targeting typically means the seller is marketing to buyers who want access to email accounts specifically, since email is often the key that unlocks password resets on many other services.

What Was Exposed in the Hotmail 18.06 File

• Email addresses
• Plaintext passwords
• URLs of the login pages tied to each credential

Why This Matters if Your Email Is Your Master Key

Because the passwords here are stored in plain, readable text, an attacker can log into an affected Hotmail account immediately. From there, they can use the "forgot password" option on banking, shopping, or social media accounts linked to that inbox, effectively taking over multiple accounts through a single email breach. If the same password is reused elsewhere, the risk widens further to credential stuffing, financial fraud, and identity theft.

How Stealer Malware Ends Up Targeting Email Providers

Infostealer malware infects a device and copies every saved username, password, and login URL from the browser, but sellers often sort that raw output afterward by the service each credential belongs to. Email logins get grouped together because they are especially valuable, given how many other accounts rely on email for password recovery. This 1,134-record file, filtered around Hotmail and dated June 18, reflects exactly that kind of targeted sorting before resale.

Check If Your Hotmail Account Was Exposed

If you use Hotmail, Outlook, or any Microsoft account, it is worth confirming your email was not included in this or a similar leak. HEROIC's free breach scanner searches more than 400 billion leaked records, including stealer logs like this one, so you can check your exposure and secure your account before someone else logs in first.