Hotmail 2 Telegram Dump Leaks 304 Email and Password Pairs

Hotmail 2 Telegram Dump Leaks 304 Email and Password Pairs

On May 2, 2026, HEROIC analysts found a stealer log named "Hotmail 2" after a Telegram user posted it to a channel used for sharing stolen account data. The file contains 304 records, each combining an email address with a plaintext password and the URL of the site the credentials came from. The name suggests it is one of several similar batches circulating from the same source, but the risk to each of the 304 people in it is entirely real.

Why This Is Dangerous

The passwords in this file were captured in plaintext, meaning anyone who opens it can read them exactly as the account owner typed them in. Paired with the URL for each entry, an attacker does not need to guess where to try a stolen login. They can go straight to the correct site and attempt to sign in within seconds of downloading the file.

What Was Exposed

• Email addresses
• Plaintext passwords
• URLs tied to each set of credentials

Why This Matters

Account takeover is the most direct risk for the 304 people whose data is in this file, since their exact login is sitting alongside the site it unlocks. If any of those passwords were reused elsewhere, credential stuffing attacks could extend the damage into banking, shopping, or social accounts that share the same password.

How Stealer Logs Like Hotmail 2 Get Made

This kind of file comes from malware running on an infected computer, quietly collecting saved browser passwords and anything typed into login pages. Each captured password is tagged with the site it belongs to, then bundled together and uploaded to Telegram, often as one of a series of similarly named files from the same uploader. That naming pattern, seen here as Hotmail 2, usually means the person behind it is distributing several batches of stolen data rather than a single one-off leak.

Check If You Are Affected

If you use a Hotmail account, it is worth checking now rather than waiting for trouble to surface. HEROIC's free breach scanner searches more than 400 billion leaked records, including stealer logs like this one, to tell you whether your email or password has been exposed. Run a free scan and change any password that comes back compromised.