Hotmail Users Targeted: 26,952 Records in HOTMAIL NEW PART 52 Leak

Hotmail Users Targeted in the "HOTMAIL NEW PART 52" Stealer Log

HEROIC analysts identified a stealer log titled "HOTMAIL NEW PART 52," tracing back to a December 2022 collection date and uploaded to a Telegram channel. The "part 52" in the name indicates this is one installment in an ongoing, numbered series aimed specifically at Hotmail account holders. This particular file contains 26,952 records made up of email addresses, plaintext passwords, and the URLs those credentials belong to, making it one of the larger individual leaks in the series.

Why This Is Dangerous

The people targeted here are specifically Hotmail and Outlook users, and the numbered "parts" suggest whoever is behind this operation has been running it repeatedly over time rather than as a one off event. Because the passwords are stored in plaintext and matched to a login URL, an attacker does not need to crack or guess anything. They can use any of the 26,952 records to log directly into a victim's inbox.

What Was Exposed

• Email addresses (Hotmail/Outlook accounts)
• Plaintext passwords
• Login URLs

Why This Matters

Email accounts are typically the recovery point for banking, shopping, and social media logins, so gaining access to a Hotmail inbox can let an attacker reset passwords and take over other accounts entirely. With nearly 27,000 records in this single part of the series, the scale of potential account takeover, credential stuffing, and identity theft is significant, especially for anyone who has reused their Hotmail password elsewhere.

How a Numbered Stealer Log Series Like This Gets Built

Stealer logs are produced by infostealer malware that infects devices and silently collects saved browser passwords, autofill data, cookies, and the addresses they belong to. When a distributor focuses on one email provider and releases results in sequential "parts," it usually means they are continuously harvesting new infections and repackaging them for repeat sale or distribution, rather than releasing a single static file. A series reaching part 52 points to a long running, high volume operation specifically targeting Hotmail users.

Check If You Are Affected

If you use a Hotmail or Outlook account, it is worth checking now given how targeted and ongoing this type of leak appears to be. HEROIC's free breach scanner checks your email address against a database of more than 400 billion leaked records, including stealer logs like this one, so you can find out quickly if you were exposed and secure your account before someone else does.