Search Your Email: Hotmail 2 Combolist Leaked 515 Logins

Inside the Hotmail 2 Leak

In May 2026, HEROIC analysts identified a small combolist named Hotmail 2 circulating on a Telegram channel. The file was uploaded by an individual user rather than a large hacking group, but its size does not make it any less useful to an attacker. It contained 515 records, each pairing an email address with a plaintext password and the URL the login was used on, with most of the accounts tied to Hotmail.

Why the Hotmail 2 Leak Is Dangerous

Because the 515 passwords in this file were stored and shared in plaintext, anyone who downloads it can try logging into the affected accounts immediately, with no cracking or decrypting required. Email accounts like Hotmail are often the gateway to a person's entire digital life, since they are used to reset passwords, receive two-factor codes, and store years of personal messages. A working Hotmail login can hand an attacker the keys to far more than just an inbox.

What Was Exposed in the Hotmail 2 Combolist

• Email addresses
• Plaintext passwords
• URLs showing which site or service each login was used on

Why This Matters for Hotmail Users

A leak of 515 records may look small next to breaches that make headlines, but each record is a real email paired with a real password. If any of these passwords were reused on other websites, the URLs included in the file give attackers a head start on where else to try them. That kind of reuse is exactly how a single leaked Hotmail password turns into credential stuffing, account takeover, identity theft, and financial fraud across accounts that have nothing to do with email.

How a Combolist Like This Gets Built

A combolist is simply a file that combines email addresses or usernames with passwords, usually pulled together from older breaches, malware infections, or manual collection, then bundled and shared or sold on Telegram and dark web forums. Attackers load these files into automated tools that test the credentials against email providers and other websites in bulk, a technique known as credential stuffing. The small scale and casual upload style of the Hotmail 2 file suggest it was compiled by a single user rather than a coordinated group, but the risk to the people inside it is the same either way.

Check If Your Hotmail Account Is Affected

If you use a Hotmail or Outlook address, it is worth confirming your credentials were not part of this leak. HEROIC's free breach scanner checks your email against a database of more than 400 billion leaked records, including combolists like this one, so you can find out in seconds and change your password before anyone else gets there first.