How the mrbouliz Hotmail Dump Led to 11,410 Stolen Logins

HEROIC analysts found a combolist labeled Untestd Hotmail mrbouliz uploaded by a Telegram User, posted on 05-Jul-2026. The file contains 11,410 records, pairing Hotmail email addresses with plaintext passwords and the URLs of the accounts they unlock.

Why This Is Dangerous

The file is labeled "untested," meaning whoever uploaded it has not yet confirmed which of the 11,410 logins still work, but that does not make it harmless. Anyone who downloads the list can run those credentials through an automated checker in minutes, quickly separating the working logins from the dead ones and ending up with a smaller, verified list of active Hotmail accounts.

What Was Exposed

• Email addresses
• Plaintext passwords
• URLs of the affected login pages

Why This Matters

If your Hotmail address and password are part of this list, the risk goes beyond your inbox. Email accounts are often the key to resetting passwords everywhere else, so a compromised Hotmail login can lead directly to account takeover on banking, shopping, and social media accounts, plus the kind of access that makes identity theft and financial fraud much easier to pull off.

How Combolists Work

A combolist pairs stolen usernames or email addresses with matching passwords, gathered from past breaches, phishing sites, or stealer malware and combined into one file. This particular list is marked untested, meaning it was likely gathered from an older source and has not been run through a checking tool yet. Once someone does test it, the working logins get separated out and often resold or shared again, so an untested combolist is still a real and growing threat.

Check If You Are Affected

Do not wait for someone else to test whether your Hotmail credentials still work. HEROIC's free breach scanner checks your email against a database of more than 400 billion leaked records, including combolists like this one, and tells you immediately if you have been exposed. Run a free scan now and change your password before anyone gets the chance to use it.