Your Hotmail Login May Be Exposed: 20,378 Passwords Leaked

In September 2025, HEROIC analysts identified a stealer log file titled "Mail Access 22K Hotmail Mix Valid 100" circulating on a private Telegram channel. The file exposed 20,378 records, each containing an email address, a plaintext password, and the URL of the mail service the credential unlocks, almost all tied to Hotmail and related Microsoft accounts.

Why This Mail Access List Is Dangerous

The name of this file, "Mail Access," tells you exactly what it is being sold as: direct access to people's email inboxes, not just a list of old passwords. Whoever holds it can log straight into thousands of Hotmail accounts, read private messages, reset passwords on other services tied to that inbox, and impersonate the account owner, all without needing to break any encryption because the passwords are stored in plaintext.

What Was Exposed in the Hotmail Mail Access List

• Email addresses for over 20,000 Hotmail and Microsoft accounts
• Plaintext passwords with no encryption protecting them
• URLs confirming the exact mail login pages each credential accesses

Why This Matters for 20,378 Hotmail Users

An email inbox is often the master key to someone's entire online life. It's where password reset links land for banking, shopping, and social media accounts, so anyone with access to a Hotmail inbox can often take over accounts far beyond email itself. With over 20,000 records in this file, the scale here is large enough that mass credential stuffing, account takeover, and identity theft are not just possible, they're likely already underway.

How a Mail Access Stealer Log Gets Built

Files like this one start as raw stealer malware output, thousands of scattered credentials pulled from infected devices. Criminals then sort that raw data by service, in this case isolating everything tied to Hotmail, and test the logins to confirm which ones still work. The result is repackaged and marketed as "mail access," a premium product because it guarantees the buyer working inboxes rather than a mix of dead and active accounts.

Check If You Are Affected

If you use Hotmail, Outlook, or any Microsoft email account, check your exposure now. HEROIC's free breach scanner searches your email against more than 400 billion compromised records, including mail access lists like this one, and tells you immediately if you've been affected. If you find a match, change your password right away and turn on two-factor authentication to keep your inbox locked down.