One File, 817 Verified Logins: ‘Private Hotmail UHQ by PieceHK 14’

HEROIC analysts identified a combolist labeled "Private Hotmail UHQ by PieceHK 14" uploaded to a Telegram channel on June 21, 2025. One file, one upload, 817 records: each one a Hotmail email address paired with a plaintext password and the URL where that login was used.

Why Every One of These 817 Records Matters

The "UHQ" label means these credentials were checked and confirmed to work before being packaged and shared. That means each of the 817 entries in this file is not a guess or an old, expired login, it is a verified, working way into someone's Hotmail account right now.

What Was Exposed in This Hotmail Combolist

• Hotmail email addresses
• Plaintext passwords
• URLs linked to the accounts

Why This Matters for These 817 Accounts

A working Hotmail login can be used to reset passwords on other linked accounts, from banking to shopping to social media. If your email is one of these 817 records, you face a real risk of account takeover, identity theft, or financial fraud, especially if the password is reused anywhere else.

How a Verified Hotmail Combolist Like This Is Made

Sellers build files like "PieceHK 14" by gathering email-and-password pairs from older breaches, phishing pages, or malware infections, filtering them down to one provider, and testing each pair to confirm it still logs in before labeling the file "UHQ" and posting it to Telegram for buyers.

Check If Your Hotmail Account Is One of the 817

Because these credentials were verified as working, checking your exposure is worth doing right away. HEROIC's free breach scanner checks your email against a database of more than 400 billion leaked records, including combolists like this one, so you can find out and change any reused passwords before someone else does.