Our Analysts Just Found 560 Hotmail Passwords Leaked Online

Our analysts tracking dark web and Telegram channels came across another entry in the "Hotmail Fresh B4_Jx" combolist series on April 16, 2026, this one containing 560 credential pairs. Each record includes a Hotmail or Outlook email address, a plaintext password, and the URL where the login was originally captured, adding to a growing pattern of webmail-focused leaks under this same label.

Why This Hotmail Fresh B4_Jx Discovery Is Dangerous

Finding another Hotmail-focused combolist so soon after previous uploads tells our analysts this isn't a one-off event, it's part of an ongoing operation targeting Microsoft email accounts specifically. Because these accounts often serve as the recovery point for banking, shopping, and social platforms, each new batch increases the odds that a working password ends up in the hands of someone looking to break into more than just an inbox.

What Was Exposed in This Hotmail Fresh B4_Jx Discovery

• Hotmail and Outlook email addresses
• Plaintext passwords
• URLs tied to each login

Why This Matters

When analysts find a batch like this, the priority is figuring out who might be affected before criminals get there first. With 560 plaintext passwords in the open, anyone whose Hotmail login shows up here faces immediate risk, especially if that same password protects other accounts elsewhere.

How Combolists Work

Combolists like this one get built by pulling credentials from a mix of older breaches, phishing pages, and infected devices, then sorting them into themed batches, in this case centered on Hotmail. Once compiled, the file spreads through Telegram groups where criminals use automated tools to test each login against Microsoft's sign-in page and any other site the email might be linked to.

Check If You Are Affected

Rather than wait for the next discovery, check your own exposure now. HEROIC's free scanner searches more than 400 billion breached records, including combolists like this Hotmail Fresh B4_Jx batch, so you can find out immediately whether your email and password are part of it.