Do You Use Hotmail? 1,894 Logins Just Leaked on Telegram

In June 2026, HEROIC analysts found a file simply named "Hotmail" circulating on Telegram, containing 1,894 records of Hotmail account credentials. The file included email addresses, plaintext passwords, and the URLs of the login pages those credentials were entered on, data pulled from infected devices rather than a breach of Microsoft's own systems.

Why This Is Dangerous

If you use Hotmail or Outlook, this is the kind of leak that puts your account at direct risk without a single system ever being hacked by a company. Because the passwords in this file are stored in plaintext, no extra effort is needed to use them, and pairing each password with its exact login URL means an attacker can go straight to the real Microsoft sign-in page. For any of the 1,894 people whose information appears here, that combination is enough to attempt an immediate takeover of the account.

What Was Exposed

• Email addresses
• Plaintext passwords
• URLs of the associated login pages

Why This Matters

Your email account is often the single point of failure behind everything else you do online, since it is used to verify your identity and reset passwords for banking, shopping, and social media accounts. If your Hotmail credentials are part of this leak and still work, someone else could read your messages, impersonate you, or use the account to break into other services you own. Reusing the same password elsewhere raises the stakes further, since attackers commonly test leaked email and password pairs against other sites through credential stuffing.

How Stealer Logs Work

Stealer logs like this one come from malware that infects a device, often through a pirated download, a fake browser update, or a malicious attachment. Once installed, the malware scans the browser for saved passwords, autofill data, and active login sessions, then quietly sends everything back to whoever controls it. The result is a file like this 1,894-record Hotmail dump, which gets shared or sold through Telegram channels and dark web forums, often to buyers looking for a specific type of account to target.

Check If You Are Affected

If you have a Hotmail or Outlook account, it is worth checking whether your information appears in this leak or any other. HEROIC's free breach scanner checks your email address against a database of more than 400 billion leaked records, including stealer logs like this one, so you can find out your exposure and secure your account before someone else does.