Researchers Spot the Hotmail Fresh B4_Jx Leak: 571 Accounts Exposed

In April 2026, HEROIC analysts identified a Telegram upload named Hotmail Fresh B4_Jx, containing 571 records of email addresses, plaintext passwords, and the URLs tied to each credential pair. As the name suggests, the file focuses specifically on Hotmail accounts the uploader claimed were newly compiled rather than recycled from older leaks. Why is this dangerous? Because the file is marketed as fresh, the credentials inside are more likely to still be active than data pulled from a years-old breach. Paired with plaintext passwords and the original login URL, this gives an attacker a direct, low-effort way to attempt access to each Hotmail account listed. What was exposed: Hotmail email addresses, plaintext passwords, and URLs linked to each credential pair. Why this matters: a Hotmail inbox is often connected to password resets for banking, shopping, and social media accounts, which means compromising it can open the door to much more than just email. If any of these 571 accounts still use the leaked password, an attacker could use the inbox itself as a launchpad to take over other services. How this combolist was built: fresh combolists like this one are usually assembled from recent phishing campaigns or new malware infections, then filtered down to a single email provider before being uploaded to Telegram. Focusing on one provider, like Hotmail here, makes the file easier for buyers to target with automated login tools built for that specific service. Check if you are affected: if you use a Hotmail account, checking now is worthwhile, especially since this data was marketed as freshly compiled. HEROIC's free breach scanner checks your email address against more than 400 billion leaked records, including uploads like this one, so you can change your password before it is put to use.