100,432 Logins Exposed: The Hotmail New Part 4 0829 Telegram Leak

100,432 Records Surface in a New Telegram Stealer Log

On February 11, 2023, HEROIC analysts tracked a stealer log file named "Hotmail new part 4 0829" being circulated on Telegram. The file held 100,432 records, each containing an email address, a plaintext password, and the URL of the site or service where that login was captured. The name of the file suggests it is one installment in a larger series being released piece by piece, a common pattern for threat actors who split large hauls into smaller drops to sustain attention across multiple posts.

Why This Is Dangerous

Because the passwords are stored in plaintext, there is no cracking or decryption required before an attacker can use them. Each record already tells an attacker exactly which email address, which password, and which website to try it on, effectively handing over a working set of login instructions. With over 100,000 entries in a single file, this is enough volume for automated tools to run through in bulk within minutes.

What Was Exposed

• Email addresses
• Plaintext passwords
• URLs and endpoints tied to each login

Why This Matters

A leaked email and password pair rarely stays limited to one account. Because so many people reuse the same password across email, banking, and shopping logins, a single exposed credential can open the door to credential stuffing attacks and full account takeover on unrelated services. Once an attacker controls the linked email inbox, they can also reset passwords on other accounts tied to that address, turning one leaked login into many.

How Stealer Logs Work

Stealer malware infects a device, often disguised as pirated software, a game cheat, or a malicious attachment, and then silently harvests every password, autofill entry, and saved login stored in the victim's browser. That data is packaged into a log file and delivered back to the attacker, frequently through an automated Telegram bot built for exactly this purpose. Files like this one are then shared publicly to build a reputation in criminal forums, while more valuable or targeted logs are typically sold privately.

Check If You Are Affected

With more than 100,000 records in this single file, the odds that your information overlaps with a leak like this one are worth taking seriously. HEROIC's free breach scanner checks your email against a database of over 400 billion leaked records, including stealer log dumps like this, so you can find out in seconds and change any exposed passwords right away.