A Telegram Upload, a Free File, 682 Hotmail Logins Exposed

Picture a Telegram channel late at night in October 2025. A user posts a file named GHOST HOTMAIL FREE, no price tag, no fanfare, just a free download link. Inside are 682 records, each one a real Hotmail login someone typed in without ever suspecting it would end up here.

Why This Is Dangerous

Giving stolen data away for free might sound less serious than selling it, but it often means the opposite. Free files spread faster because there is no barrier to grabbing a copy, so within hours a small file like this can be downloaded by dozens of different people, each one free to try the logins for themselves.

What Was Exposed

• 682 total records
• Email Addresses
• Plaintext Password
• URLs for each login

Why This Matters

A file this small can feel unimportant, but every one of the 682 people in it has a real inbox somewhere, probably conected to their banking, shopping, or social accounts through that same Hotmail address. The size of the leak has definately nothing to do with how much damage it can cause any one individual.

How Stealer Logs Work

Free files like this usually come from smaller or newer infostealer operations trying to build a reputation on Telegram before they start charging for future leaks. The malware behind it works the same way regardless of price, quietly pulling saved logins out of an infected browser and sending them off to whoever is running the operation.

Check If You Are Affected

682 records is a small haystack, wich makes it even easier to check. HEROIC's free breach scanner searches more than 400 billion exposed records so you can find your needle, or confirm you are not in it, within seconds.