The 'Secret Hotmails 13' Dump Put 2,623 Email Logins on the Dark Web

In June 2026, HEROIC analysts tracked a combolist labeled "Secret Hotmails 13" that a Telegram user uploaded on June 25. The file contains 2,623 records tied to Hotmail accounts, pairing email addresses with plaintext passwords and the URLs those logins were used on. Why a Hotmail-Specific Dump Is Dangerous Naming a file "Secret Hotmails" signals that whoever put it together deliberately targeted one email provider rather than scraping data at random. Because the passwords sit in plaintext and each one is matched to the exact URL it was used on, an attacker can log into these Hotmail accounts directly, with no cracking required. A compromised email inbox is often the fastest way into someone's other accounts, since email is the recovery method for banking, shopping, and social media logins. What Was Exposed Email addresses Plaintext passwords, stored in readable, unencrypted form URLs showing where each login was used Why This Matters for the 2,623 Hotmail Accounts Involved Once an attacker gets into a Hotmail inbox, they can search for password reset emails, banking notifications, and other sensitive messages, then use that access to take over additional accounts. If the same password is reused elsewhere, those accounts are exposed too, opening the door to account takeover, financial fraud, and identity theft. How a Targeted Combolist Like "Secret Hotmails 13" Gets Made Lists focused on a single email provider are usually built by pulling stolen credentials from previous breaches, malware infections, or phishing campaigns, then filtering out only the accounts that match that provider. The "13" in the name suggests this is one entry in a series of similar files distributed over time. Telegram is a common place for these targeted lists to be sold or shared, often quickly and with little accountability. Check If Your Hotmail Account Was Among the 2,623 Exposed If you use Hotmail or Outlook, it is worth checking whether your account appears in this list. HEROIC's free breach scanner checks your email against a database of more than 400 billion exposed records, including targeted combolists like this one, so you can find out quickly and change your password if needed.