Hotmail Users Targeted in the 10,000 Lines Private Leak

HEROIC analysts found a combolist called "10.000 LINES PRIVATE HOTMAIL" uploaded by a Telegram user in March 2026. The file contains 9,376 records pairing email addresses with plaintext passwords, along with associated URLs. As the name suggests, this list specifically targets Hotmail accounts, making anyone who used a Hotmail or Outlook email address the direct focus of this leak.

Why Hotmail Users Are Being Targeted

Attackers often build combolists around a single email provider because it makes automated attacks more efficient. A webmail account like Hotmail is frequently the recovery email for banking, shopping, and social media accounts, so gaining access to it can unlock a much wider set of accounts than the inbox alone. If your Hotmail address and password appear in this file, an attacker could use your inbox as a stepping stone into other services tied to that email.

What Was Exposed in the 10.000 Lines Private Hotmail File

• Email addresses (Hotmail accounts)
• Plaintext passwords
• Associated URLs linking each credential to a login page

Why This Matters for Hotmail Account Holders

With 9,376 plaintext credentials in circulation, this file is ready to use in credential stuffing attacks the moment someone downloads it. If your password is reused across other accounts, or if your Hotmail inbox is used to reset passwords elsewhere, exposure here can quickly cascade into account takeover, identity theft, and financial fraud across multiple services, not just your email.

How a Targeted Combolist Like This Gets Built

To build a provider-specific combolist, attackers filter stolen credentials from phishing campaigns, malware infections, or older breaches down to just the accounts matching a particular email domain, in this case Hotmail. The resulting file, labeled "10.000 LINES PRIVATE HOTMAIL," is then shared or sold on Telegram to buyers who specifically want Hotmail logins because of how often they unlock access to other accounts.

Check If You Are Affected

To find out whether your Hotmail address appears in this file or any other breach HEROIC tracks, use HEROIC's free breach scanner. It checks your information against a database of more than 400 billion leaked records, so you can quickly see your exposure and secure your inbox before an attacker uses it against you.