750 Hotmail Accounts Exposed: Passwords in Plain Text

What Transpired

On December 30, 2025, attackers dumped 750 compromized Hotmail and Outlook account credentials via Telegram. This targeted stealer log contained plaintext passwords and email addresses, showing continued focus on harvesting email platform credentials for identity theft and account takeover operations.

The Threat to You

Email accounts are gateway credentials to everything else. With plaintext passwords exposed, attackers can immediately access email, use account recovery systems to reset other passwords, and intercept verification codes sent via email. A single compromized email account often leads to total account ecosystem compromise.

Exposed Data Includes

• 750 Hotmail and Outlook email addresses
• Plaintext passwords in human-readable text
• Associated endpoint and cloud service URLs
• Recovery phone numbers and security information

Why This Matters

This December stealer log shows targeted email credential harvesting remains highly profitable for attackers. Email compromise enables a cascade of secondary breaches as attackers use recovered accounts to access linked services. Every Hotmail password in this dump represents a compromized online identity.

How Hotmail Credentials Are Harvested

Stealer trojans monitor browser login events at the Outlook/Hotmail login portal and capture credentials as they're entered. They also harvest saved credentials from Outlook desktop clients and browser password stores. The malware exfiltrates email configuration data including recovery options and two-factor authentification backup codes.

Secure Your Email Account Now

If your Hotmail account apears in this dump, change your password immidiately to a unique, complex value. Verify your account recovery email and phone number haven't been modified. Check your forwarding rules and connected app permissions for unauthorized access. Enable two-factor authentification using an authenticator app, not just SMS.