How a Stealer Log Exposed 146 Stolen Logins: AntiPublic HOTMAIL 7421

HEROIC analysts identified this stealer log on 03-Apr-2026. The breach exposed 146 records, with stolen data including email addresses, plaintext passwords, and URLs. The source is identified as 2 - AntiPublic_HOTMAIL_7421.

Why This Is Dangerous

This stealer log specifically targets Hotmail credentials, meaning the exposed accounts are Microsoft email addresses. Email accounts are the skeleton key of your digital life. With access to your email, an attacker can trigger password resets on banking apps, social media, shopping sites, and any other service that uses your email as a recovery address. The 146 stolen records here are complete login kits: email address, password in plaintext, and the URL where each credential was used.

What Was Exposed

• Email addresses
• Plaintext passwords
• URLs (the exact websites where credentials were used)

Why This Matters

Hotmail and Outlook accounts are linked to Microsoft services including OneDrive, Teams, Xbox, and Microsoft 365. A compromised Microsoft account can expose personal documents, business files, and stored payment methods, and can serve as a gateway to every service where that email is used as a recovery address. The AntiPublic label on this breach suggests it was compiled from previously unpublished sources, meaning these credentials may not appear in older breach databases, making them fresher and more likely to still work.

How Stealer Logs Work

Stealer logs are created when malware infects a device and begins harvesting saved login credentials. The malware targets browser-stored passwords, session cookies, and keystrokes to capture email addresses and passwords as they are entered. Each credential is paired with the URL of the site it belongs to, producing a structured file that attackers can sort and filter by service type. Files like this one are then circulated through private Telegram channels, where they are distributed to criminal networks for use in automated login attacks.

Check If You Are Affected

HEROIC offers a free breach scanner that searches 400 billion records from known breaches. Search your email address now to find out if your credentials appear in this breach or others. The scan is free and takes seconds.