The Hotmail UHQ Piecehk 1 Combolist Leaked 997 Passwords Silently

What HEROIC Analysts Found in the Hotmail UHQ Piecehk 1 Leak

On June 9, 2025, HEROIC analysts identified a combolist titled "HOTMAIL UHQ By Piecehk 1" after it was uploaded to a Telegram channel by an individual user. The file contains 997 records pairing Hotmail email addresses with plaintext passwords, along with the URLs of the login pages those credentials belong to. The affected accounts are tied primarily to the United States.

Why This Is Dangerous

If your Hotmail account is one of the 997 in this file, someone could already be reading your emails, resetting your other passwords, or quietly monitoring messages without you ever noticing. Because the passwords are stored in plaintext, there is no barrier stopping an attacker from logging in right now.

What Was Exposed in the Hotmail UHQ Piecehk 1 Combolist

• Email addresses
• Plaintext passwords
• URLs identifying the associated login pages

Why This Matters

Hotmail inboxes are often used to receive password reset links for banking, shopping, and social media accounts. If an attacker quietly logs into one of these 997 accounts, they can trigger resets on other services, intercept verification codes, and gradually take over a person's entire online identity before the victim ever suspects anything is wrong. Reused passwords make this risk even bigger.

How This Combolist Was Likely Built

A file labeled "UHQ," or ultra high quality, signals that a seller has already tested the email and password pairs and confirmed they still work. Lists like this are typically built from older breaches, phishing pages, or malware infected devices, filtered down to a single provider such as Hotmail, then shared or sold in Telegram channels where they can be used immediately.

Check If You Are Affected

If you use a Hotmail account, it is worth checking your exposure before someone else logs in first. HEROIC's free breach scanner searches a database of more than 400 billion leaked records, so you can quickly see if your credentials appear in this leak or another one and change your password right away.