Hotmail Fresh B4_Jx Stealer Log Exposes 4,853 Plaintext Passwords

In May 2026, a stealer log named "Hotmail Fresh B4_Jx" was uploaded to a Telegram channel, exposing 4,853 records tied to Hotmail and Outlook accounts in the United States. The leaked data includes email addresses, plaintext passwords, and the URLs of the sites where each credential was captured. This is not a breach of Microsoft's Hotmail or Outlook infrastructure; the data was harvested from individual infected devices using infostealer malware, not stolen from Microsoft's own servers.

Why a 4,853-Record Stealer Log Is a Serious Problem

A log this size is a different scale of threat than the small batches that occasionally surface. Thousands of people had their browsers quietly emptied out by malware, with every saved password bundled up and packaged for resale. A file this large is valuable enough that it has likely already changed hands more than once before landing in this public listing, giving whoever bought it a real head start over the people whose data is inside it.

What Was Exposed

• Email addresses
• Plaintext passwords
• URLs of the sites where the credentials were used

Why This Matters

With nearly 5,000 plaintext passwords sitting in one file, attackers do not need to crack anything, they can use the credentials immediately. Logs this size are ideal for credential stuffing, where automated tools test each stolen email and password combination against banking sites, shopping accounts, and social media platforms in bulk. If you reuse passwords across accounts, one exposed login here can lead directly to account takeover, identity theft, or financial fraud.

How a Stealer Log This Size Gets Built

Infostealer malware spreads through fake downloads, cracked software, and phishing links, then quietly reads every password, cookie, and autofill entry saved in the victim's browser. A single infected device might only yield a handful of logins, so a log of 4,853 records typically means the malware operator infected many victims over time and combined the results into one file before releasing it on Telegram.

Check If You Are Affected

With 4,853 records already exposed, the odds that your information is affected are real. HEROIC's free breach scanner checks your email address against more than 400 billion leaked records, including stealer logs like this one, so you can find out immediately and change any reused passwords before someone else uses them first.