Hotmail Users Targeted: 647 Passwords Leaked in B4_Jx Hack

Hotmail account holders are the focus of a file called "Hotmail Fresh B4_Jx", uploaded by a user on Telegram on April 25, 2026. The file contained 647 records, each pairing an email address with a plaintext password and a related URL, specifically built around this one email platform.

Why the Hotmail Fresh B4_Jx Leak Is Dangerous

Targeting a single platform like Hotmail makes an attacker's job simpler. They already know exactly which login page to try each credential against, and since every password in this file is plaintext, there is no encryption slowing them down. All 647 accounts are ready for immediate testing the moment this file is downloaded.

What Was Exposed in Hotmail Fresh B4_Jx

• Email Addresses
• Plaintext Passwords
• URLs

Why This Matters

If you use Hotmail, this leak is worth taking personally rather than treating as background noise. Email accounts are often the key that unlocks everything else, since most other services rely on email for password resets. A compromised Hotmail account tied to one of these 647 records can quickly become a stepping stone into banking, shopping, and social accounts as well.

How Combolists Work

A combolist compiles stolen usernames and passwords, typically pulled from earlier breaches or malware-infected devices, into a single file focused on a specific target, in this case Hotmail users. Attackers run these lists through automated tools that test each pair directly against the platform they were built for, a technique called credential stuffing. Because the list is already filtered to one platform, the odds of a successful login rise compared to a generic, mixed combolist.

Check If You Are Affected

If you have a Hotmail account, checking your exposure only takes a minute. HEROIC's free breach scanner searches more than 400 billion leaked records, including combolists like Hotmail Fresh B4_Jx, and shows you immediately if your email has surfaced. If it has, change that password everywhere you have reused it.