Hotmail Fresh B4_Jx Leak: What 13 Exposed Logins Mean for You

On 18 May 2026, a stealer log named "Hotmail Fresh B4_Jx" appeared on Telegram containing 13 records tied to Hotmail and Outlook accounts in the United States, including email addresses, plaintext passwords, and the URLs where those credentials were captured. This is not a breach of Microsoft's own systems; the data was harvested from individual infected devices, not stolen from Hotmail's servers.

What Happens When Only 13 Accounts Are Leaked

Thirteen records is a tiny leak compared to the breaches that dominate headlines, but small size does not mean small risk. A log this size is often traded quietly, hand to hand, among a small group of criminals rather than posted widely, which means the odds that someone actively tries each login are actually higher, not lower. If you are one of the 13, the consequence is the same as if you were one of 13 million: your password is now in someone else's hands.

What Was Exposed

• Email addresses
• Plaintext passwords
• URLs of the sites where the credentials were used

Why This Matters

A Hotmail or Outlook address is frequently the recovery email for other accounts, so a single leaked login can cascade into several. Because the password was stored in plaintext, it is immediately usable, no cracking needed. Attackers run leaked logins like these through credential stuffing tools that test the same email and password against banking, shopping, and social media sites, which is how one small leak turns into account takeover, identity theft, or financial fraud.

How Stealer Logs Like This One Get Made

Infostealer malware gets onto a device through a cracked program, fake installer, or phishing link, then quietly collects whatever passwords, cookies, and autofill data the browser has saved. The result is packaged into a stealer log and passed along or sold, sometimes to a wide audience and sometimes, as with this 13-record file, to a much smaller one.

Check If You Are Affected

Even a leak this small can lead to a real consequence for the people in it. HEROIC's free breach scanner checks your email address against more than 400 billion leaked records, including small stealer logs like this one, so you know exactly where you stand and can change your password before it's used against you.