The Hotmail 1.5k Dump Put 1,465 Stolen Email and Password Pairs Online

In March 2026, HEROIC analysts identified a small combolist titled Hotmail 1.5k circulating on Telegram, containing 1,465 records of email addresses and plaintext passwords tied to Hotmail accounts, along with the URLs associated with each entry.

Why This Is Dangerous

Email accounts like Hotmail are often the master key to a person's online identity, since they are used to reset passwords for banking, shopping, and social media accounts. With 1,465 plaintext passwords exposed and clearly labeled as Hotmail logins, an attacker can attempt to log in directly and, if successful, use the inbox to take over other linked accounts.

What Was Exposed in the Hotmail 1.5k Leak

• Email addresses
• Plaintext passwords
• Associated URLs

Why This Matters

Once an attacker gets into a Hotmail inbox, they can search for old account confirmations, password reset emails, and personal information that helps them take over other accounts tied to that address. This turns a relatively small leak of 1,465 records into a much larger risk of identity theft and financial fraud if the email account is used to recover other logins.

How a Combolist Like This Works

Files like Hotmail 1.5k are built by pulling email and password combinations from older breaches or malware logs and filtering them down to entries tied to a specific email provider. Sellers on Telegram often package and label these lists by provider and size, in this case "1.5k" referring to the roughly 1,500 records inside, to make it easy for buyers to find credentials relevant to their target.

Check If You Are Affected

If you use a Hotmail or Outlook address, it is worth checking whether your credentials appear in this or another leak. HEROIC's free breach scanner searches more than 400 billion leaked records to tell you in seconds if your email has been exposed.