The Ninho Private Hotmail Leak Holds Just 714 Accounts, Still Risky

HEROIC analysts identified this combolist in mid-June 2026 after a Telegram user uploaded another file labeled Ninho Private Hotmail, this time containing 714 records. It appears to be a separate batch from a similarly named file HEROIC also tracked on the same date, which is common when a group releases credentials in multiple smaller uploads rather than one combined file. Each record pairs a Hotmail email address with a plaintext password and the URL it was used on. Why This Leak Is Dangerous: With passwords stored in plain, readable text, anyone who obtains this file can attempt to log into the affected Hotmail inboxes immediately, without needing to crack anything. The private label suggests this batch was first shared within a closed group before reaching wider circulation, a pattern that often means the credentials are still fresh enough to work. What Was Exposed: - Hotmail email addresses - Plaintext passwords - URLs tied to each set of credentials Why This Matters: Email inboxes are commonly used to reset passwords for banking, shopping, and social media accounts. If your address is among these 714 records, an attacker could use that access to reach other accounts tied to it, and reused passwords elsewhere put you at further risk of credential stuffing and account takeover. How Private Combolists Like Ninho Circulate: Telegram groups that brand their releases with a name like Ninho typically compile combolists from phishing pages, malware infections, or older breach data, then share them first within a small circle before broader channels pick them up. Splitting a larger source into multiple batches, as appears to be the case here, is a common tactic to test demand before a larger release. Check If You Are Affected: HEROIC's free breach scanner checks your email against more than 400 billion leaked records, including combolists like this 714-record file. Run a free scan to see if your Hotmail address or any other account shows up in HEROIC's database.