The Hotmail Fresh B4_Jx Leak: 918 Passwords Now Exposed Online

HEROIC analysts found a combolist named Hotmail Fresh B4_Jx uploaded to a Telegram channel on 3 May 2026. The file contains 918 records, each combining a Hotmail email address with a plaintext password and a related URL. Why This Is Dangerous: Because the passwords in this file are stored in plaintext, anyone who downloads it can log directly into the affected Hotmail accounts without cracking a single password. If the account owner reused that password elsewhere, the risk extends well beyond just their inbox. What Was Exposed: - Hotmail email addresses - Plaintext passwords - URLs tied to each account Why This Matters: A compromised Hotmail account can be used to reset passwords on other services, request account recovery codes, or send phishing messages to the victim's contacts. For the 918 people in this file, password reuse is the single biggest factor that turns this leak into a full account takeover. How a Combolist Like This Works: Files labeled Fresh, like this one, are usually recently compiled batches of credentials, drawn from stealer logs or smaller breaches, packaged and shared quickly to build reputation on Telegram credential channels. Their small size makes them easy to distribute widely and quickly. Check If You Are Affected: HEROIC's free breach scanner checks your email against more than 400 billion exposed records, including leaks like this one, so you can find out immediately if your credentials are circulating.