Hotmail Users Targeted: Ninho Private Leak Exposes 66 Passwords

What HEROIC Analysts Found On 26 June 2026, HEROIC analysts identified a small combolist named NINHO PRIVATE HOTMAIL uploaded to Telegram. The file contains 66 records, each pairing a Hotmail email address with a plaintext password and a related URL. Why This Is Dangerous A small list does not mean small risk for the people on it. Every one of these 66 accounts has a readable password attached, giving whoever downloads the file everything needed to log in immediately, no guessing or cracking required. What Was Exposed 66 Hotmail email addresses Plaintext passwords for each account URLs tied to each login Why This Matters Hotmail and Outlook accounts are often the master key to someone's digital life, linked to password resets for banking, shopping, and social media. If any of these 66 people reused their Hotmail password elsewhere, an attacker can use this single leak to unlock several other accounts through credential stuffing, leading to identity theft or financial fraud. How a Private Combolist Like This Gets Made The word private in the file name suggests this list was meant to stay within a small circle before it leaked further, a common pattern for combolists traded quietly among a handful of people before spreading to wider Telegram channels. These lists are typically pieced together from phishing pages, malware logs, or older breach data rather than a single hack. Check If You Are Affected If you use a Hotmail or Outlook address, it only takes a moment to check whether it appears in this leak. HEROIC's free breach scanner searches more than 400 billion exposed records, giving you a clear answer so you can change your password if needed.