The Hotmail Fresh B4_Jx Dump Put 628 Outlook Logins on the Dark Web

HEROIC analysts found a combolist named Hotmail Fresh B4_Jx that a Telegram user uploaded on April 18, 2026. The file contains 628 records pairing email addresses with plaintext passwords and the URLs those logins were tied to, with the entries specifically focused on Hotmail and Outlook accounts. The word "Fresh" in the name is a common label sellers use to indicate the credentials were recently harvested and have not yet been widely tested or burned by other buyers.

Why This Is Dangerous

Because these credentials are marketed as fresh, they are more likely to still be active than older, previously circulated combolists. With plaintext passwords already paired to email addresses and login URLs, an attacker can log into these 628 Hotmail or Outlook inboxes immediately, with no cracking required. From inside an inbox, an attacker can read personal messages, find other accounts linked to that address, and trigger password resets on services connected to it.

What Was Exposed

• Email addresses
• Plaintext passwords
• Associated URLs

Why This Matters

Webmail accounts like Hotmail and Outlook are often the recovery address for banking, shopping, and social media logins, which makes them especially valuable targets. For the 628 people affected here, a compromised inbox can quickly cascade into other account takeovers if an attacker uses it to intercept password reset emails. Being labeled "fresh" also means these particular credentials are more likely to still be valid right now, making the window to change passwords especially important.

How Combolists Work

A combolist is a plain text file of login pairs, typically formatted as email:password, gathered from sources such as phishing kits targeting webmail login pages, malware infections, or older leaks. Sellers often sort these lists by provider, in this case Hotmail, and by freshness, since newly stolen credentials are worth more before account owners notice and change their passwords. Files like Hotmail Fresh B4_Jx circulate on Telegram and are typically sold quickly while the credentials are still likely to work.

Check If You Are Affected

To check whether your email address is part of this combolist or any other exposed dataset, run a free scan with HEROIC's breach checker. It searches more than 400 billion compromised records, so you can quickly find out if your Hotmail or any other account has been exposed and change the password before it gets used.