PIECEHK 9 Hotmail Combolist: 599 Verified Stolen Logins Leaked

HEROIC analysts identified a combolist called PRIVATE HOTMAIL UHQ BY PIECEHK 9, uploaded by a Telegram user on 20 June 2025. The file, labeled "UHQ" or ultra-high-quality by its distributor, contains 599 Hotmail email addresses paired with plaintext passwords and the URLs of the accounts they unlock.

Why This Is Dangerous

Sellers label combolists "UHQ" when the credentials inside have been checked and confirmed to still work, meaning a much higher share of these 599 accounts are likely still accessible right now compared to a random, unverified dump. That verification step is exactly what makes this list more dangerous than its size suggests.

What Was Exposed

• Hotmail email addresses
• Plaintext passwords
• URLs of the login pages tied to each account

Why This Matters

A verified, working Hotmail login gives an attacker immediate access to personal email, which is often the gateway to resetting passwords on banking, shopping, and social media accounts. Anyone in this batch who reused their Hotmail password elsewhere faces exposure well beyond their inbox.

How Combolists Work

A combolist pairs stolen usernames or emails with their passwords, usually gathered from stealer logs or older breaches, then organized by email provider or target site. "UHQ" sellers typically run the list through checker tools before selling it, confirming each pair still logs in successfully, which is why verified lists command higher prices and pose a more immediate threat than unchecked ones.

Check If You Are Affected

HEROIC's free breach scanner checks your email against more than 400 billion leaked records, including verified combolists like this one. Run a free search and change your password immediately if your account turns up.