Hotmail Fresh B4_Jx Put 108 Stolen Email and Password Pairs Online

HEROIC analysts identified this stealer log on 07-Apr-2026. The breach exposed 108 records, with stolen data including email addresses, plaintext passwords, and URLs. The source is identified as Hotmail Fresh B4_Jx uploaded by a Telegram User.

Why This Is Dangerous

This stealer log contains 108 Hotmail account credentials stored in plaintext. Because Hotmail and Outlook accounts are often tied to Microsoft services and used for password recovery on other platforms, a single compromised email account can open the door to multiple services. The plaintext format of these passwords means anyone who downloads this file can immediately try them.

What Was Exposed

• Email Addresses
• Plaintext Passwords
• URLs (website addresses where credentials were captured)

Why This Matters

Even a small breach of 108 records can cause significant harm to the individuals affected. With email addresses and plaintext passwords in hand, attackers can attempt to access email inboxes directly, use those accounts to reset passwords elsewhere, or sell the credentials to others. The URLs included in the file identify exactly which sites were involved, giving attackers a roadmap for follow-up attacks. Account takeover and identity theft are the most common consequences.

How a Stealer Log Works

Stealer malware is typically delivered through phishing emails, malicious downloads, or compromised software. Once on a device, it runs silently and harvests stored passwords from browsers like Chrome, Firefox, and Edge, as well as from email clients and applications. All of this data, including the website URL and account credentials, is collected into a log file. The attacker retrieves the file and distributes it or uses it directly to access victims' accounts.

Check If You Are Affected

HEROIC offers a free breach scanner that searches 400 billion records. Search your email address now to see if your credentials appear here or elsewhere. Free, takes seconds.