Hotmail 2 Combolist Leak: More Than 2,000 Passwords Exposed

Hotmail 2: More Than 2,000 Credential Pairs Hit Telegram

HEROIC analysts identified a combolist named "hotmail 2," uploaded by a Telegram user on 17 April 2026. The file contains 2,103 records pairing email addresses with plaintext passwords, along with the URLs each credential pair was tied to, all centered on Hotmail accounts.

Why This Is Dangerous

Because the passwords in this combolist are stored in plaintext, an attacker who obtains the file can log directly into a Hotmail inbox without cracking or guessing anything. An email account is often the key to resetting passwords elsewhere, so a compromised Hotmail login can quickly become the doorway into other accounts tied to that same address.

What Was Exposed

• Email addresses
• Plaintext passwords
• URLs tied to each credential pair

Why This Matters

With 2,103 Hotmail credential pairs now circulating, this list is a direct feed for credential stuffing attempts against other services where the same password may have been reused. Since email accounts control password resets across banking, shopping, and social platforms, a single successful login here can snowball into broader account takeover, identity theft, and financial fraud.

How Combolists Work

A combolist gathers email and password pairs, often focused on a single provider such as Hotmail in this case, into one file for distribution. These lists are typically pulled together from older breaches or stealer malware output, then shared or sold in numbered batches, like this "hotmail 2" listing, on platforms such as Telegram.

Check If You Are Affected

With 2,103 records from this combolist now in circulation, checking your exposure takes only a moment. HEROIC's free breach scanner searches more than 400 billion leaked records, including combolists like this one, so you can find out right away whether your Hotmail address was exposed and change your password before someone else uses it.