Identity Theft Risk Grows After “live 10.11” Outlook Leak

In late January 2023, HEROIC analysts identified a stealer log posted to Telegram labeled "live 10.11," tied to Microsoft's Live/Outlook email service and containing 3,794 exposed records. Each entry pairs an email address with a plaintext password and the URL of the login page it belongs to, consistent with malware built to steal saved credentials from an infected browser.

Identity Theft Gets Easier With Leaks Like This One

Nearly 3,800 Outlook and Live email accounts now have their passwords exposed in plain text on Telegram. Since these inboxes are often linked to Microsoft accounts used for cloud storage, contacts, and even Windows sign-ins, a compromised login here can hand an attacker far more than just email access, it can open the door to personal documents, saved contacts, and enough personal detail to attempt identity theft.

What Was Exposed in the "live 10.11" Log

• Email addresses
• Plaintext passwords
• URLs of the associated login pages

Why This Matters

Live and Outlook accounts frequently serve as the recovery email for other services, so a stolen password here can be used to reset logins elsewhere. That makes this small file a launchpad for credential stuffing and account takeover on services well beyond Microsoft's own products.

How This Stealer Log Was Created

Infostealer malware spreads through cracked software, malicious attachments, or fake downloads, then automatically extracts every saved password and login URL from the victim's browser. The stolen data is sorted by email provider, in this case Microsoft's live.com domain, and packaged into a file like this one before being shared or sold in Telegram channels dedicated to trading stolen logins.

Check If You Are Affected

If you use a Live or Outlook email address, it is worth checking whether your login appears in this leak. HEROIC's free breach scanner searches a database of more than 400 billion compromised records so you can confirm your exposure in seconds and secure your account before it is misused.