1,600 Hotmail Logins Risk Chained Account Takeovers Now

Another Hotmail-targeted file, hotmail_20250624_105702, surfaced on Telegram the same day, June 24, 2025, exposing 1,600 stolen credential records.

Why This Is Dangerous

Even at 1,600 records, every single one includes a plaintext Hotmail password. Small files like this often get less attention, which makes the risk of chained account takeovers even higher since fewer people are watching for it.

What Was Exposed

• Email addresses (1,600 unique Hotmail accounts)
• Plaintext passwords with no encryption
• URLs tied to each compromised service

Why This Matters

This file appearing on the same day as a similar Hotmail leak suggests a single operator or campaign that split its haul into multiple smaller uploads. If your email showed up in one Hotmail file from this date, checking related uploads from the same day is worth doing too, chained leaks like this often share victims.

How Stealer Logs Work

Splitting one day's worth of stolen Hotmail credentials into separate timestamped files, like this one and its companion from earlier the same day, is a common tactic among sellers who want to make each release look 'fresh' and distinct, even though they likely come from the same underlying infection wave, wich makes chaining the data back together fairly easy for researchers.

Check If You Are Affected

HEROIC's free scanner checks your email against more than 400 billion (400B+) leaked records, including both Hotmail files from June 24, 2025. Check now, and change any exposed passwords imediately, chained leaks like these multiply the risk fast.