Someone Has Your Password: 37,650 Hotmail Credentials Leaked

HEROIC identified a stealer log file specifically targeting Hotmail.com users that was shared in July 2025. The dump exposes 37,650 records, each linking a Hotmail email address to its plaintext password along with the URL where the credential was actively used. This means someone, somewhere, may already have the exact password you use to log into your email.

Your Password Is in Plaintext — Anyone Can Read It

There is no encryption protecting the passwords in this dump. Every single one of the 37,650 credentials is stored as readable text, which means anyone who downloads this file can see your password exactly as you typed it. Unlike breaches where passwords are hashed and require effort to crack, plaintext exposure is the worst-case scenario for affected users.

What Was Exposed

• Email Addresses — Hotmail accounts used as both login credentials and communication channels
• Plaintext Passwords — your actual passwords, visible to anyone with the file
• URLs — the websites you were logged into when your credentials were stolen

Why One Stolen Password Puts All Your Accounts at Risk

If you use the same password for your Hotmail account and other services, every one of those accounts is now compromised. Attackers routinely take leaked credentials and test them across banking portals, social media platforms, online retailers, and cloud services. This practice, called credential stuffing, exploits the common habit of password reuse and can result in financial loss, identity theft, and unauthorized access to sensitive personal data.

How Infostealer Malware Stole These Credentials

Each record in this dump was harvested by infostealer malware running on a victim's computer or mobile device. The malware typically arrives through a deceptive download, a phishing email attachment, or a compromised website. Once installed, it silently siphons saved passwords from browsers, captures login sessions, and transmits everything back to the attacker. The victim usually has no idea their device is compromised until they see suspicious activity on their accounts.

Check If Your Credentials Were Exposed

HEROIC's breach scanner draws on a database of over 400 billion compromised records from data breaches, stealer logs, and dark web leaks. Enter your Hotmail email address to instantly check whether your credentials appeared in this dump or any other known breach. Finding out early gives you the chance to change your passwords and enable two-factor authentication before an attacker strikes.