Identity Theft Risk Grows After ‘X2159 HQ Hotmail’ Leaks 2,152 Logins

Identity Theft Risk Rises After the "X2159 HQ Hotmail" Leak

On July 18, 2026, HEROIC analysts identified a combolist called "X2159 HQ H0TMAIL" uploaded to a Telegram channel. The file contained 2,152 records pairing Hotmail-linked email addresses with plaintext passwords and the URLs of the accounts they access, tied to United States users.

Why This Hotmail Leak Raises the Stakes for Identity Theft

Hotmail and Outlook accounts often sit at the center of a person's online identity, tied to banking alerts, shopping accounts, and password reset emails. Because the passwords here are stored in plaintext and marked "HQ," meaning high quality and likely still active, an attacker can use one of these 2,152 logins to reach into every other account connected to that inbox.

What Was Exposed in the 2,152-Record "X2159 HQ Hotmail" File

• Hotmail and Outlook linked email addresses
• Plaintext passwords
• URLs tied to each account

Why This Matters Beyond the Original 2,152 Accounts

Once inside a Hotmail inbox, an attacker can search for old statements, reset passwords on other sites, and impersonate the account owner in messages to contacts. That is how a single leaked email login turns into credential stuffing on other platforms, account takeover, and ultimately identity theft or financial fraud.

How "HQ" Hotmail Combolists Like This Get Made

These dumps are built by testing stolen email and password combinations, often gathered from stealer malware or older breaches, against real Hotmail login pages. Only the logins that still work, the ones marked "HQ," are kept and packaged together. Focusing on a single provider like Hotmail makes the resulting file more attractive to buyers looking for a specific type of account to target.

Check If Your Hotmail Account Is Among the 2,152 Exposed

If you use a Hotmail or Outlook address, it is worth finding out whether it appears in this leak before someone else logs in first. HEROIC's free breach scanner checks your email against a database of more than 400 billion leaked records, so you can act quickly if your information turns up.