Hotmail Users Targeted as Telegram Leak Exposes 1,098 Accounts

A Telegram post advertising "1.1K FRESH HOTMAIL VALID - TXT CLOUD" targeted a very specific group, people using Hotmail and Outlook style email accounts. Once verified, the file held 1,098 working records, each one an email address paired with a plaintext password and the URL it was captured from.

Why This Is Dangerous

Sellers on Telegram often market stealer logs by the email provider they contain because Hotmail and Outlook accounts frequently double as recovery emails for banking, shopping, and social media. Targeting that specific pool of users occured on purpose, not by accident.

What Was Exposed

• 1,098 total records
• Email Addresses
• Plaintext Passwords
• URLs tied to each account

Why This Matters

If your Hotmail account is the recovery email for anything else you own, this kind of leak becomes a doorway into all of it, not just the inbox itself. Attackers know that wich makes recovery email leaks especially valuable, since resetting one password can unlock several other accounts.

How Stealer Logs Work

Infostealer malware sits on an infected device and pulls saved logins directly from the browser, then filters and labels the results, in this case by provider, before packaging it as a log file for sale or free distribution on Telegram.

Check If You Are Affected

If you use Hotmail, Outlook, or any other email provider, it is worth checking now rather than later. HEROIC's free breach scanner covers more than 400 billion leaked records and can tell you in seconds whether your email address turned up in this leak or others.