HOTMAIL NEW 0804 Combolist Exposed 745,891 Hotmail Logins

The HOTMAIL NEW 0804 Combolist: What HEROIC Analysts Found. HEROIC analysts identified a combolist labeled HOTMAIL NEW 0804, uploaded by a Telegram user and tied to a leak dated March 23, 2023. The file contains 745,891 records pairing Hotmail email addresses with plaintext passwords, along with the URLs of the login pages those credentials belonged to. Why This Is Dangerous. This combolist focuses specifically on Hotmail and Outlook accounts, which are often the master key to a person's digital life. An email inbox is frequently used to reset passwords for banking, shopping, and social media accounts, so a compromised Hotmail login can give an attacker a path into far more than just email. What Was Exposed: Hotmail email addresses tied to individual accounts. Plaintext passwords stored with no encryption. The URLs of the login pages those credentials were used on. Why This Matters. With nearly 746,000 records in this single file, the scale here is significant. Because email accounts are so often used to verify identity and reset other passwords, anyone whose Hotmail credentials appear in this leak faces a heightened risk of account takeover that could cascade into other accounts tied to that inbox. How Combolists Work. A combolist compiles working, or once-working, email and password pairs, often gathered from earlier breaches, phishing campaigns, or stealer malware, into one large file. Files like this one that are labeled by email provider, such as Hotmail, are typically built by filtering a larger dataset down to accounts from a specific service, making them easier for criminals to target with automated login attempts. Check If You're Affected. If you use a Hotmail or Outlook account, or any other email service, HEROIC's free breach scanner checks your address against a database of more than 400 billion leaked records so you can find out in seconds whether your information has been exposed.