The outlook.com Leak Gave Attackers 751 Ready-to-Use Logins

HEROIC analysts identified a combolist labeled outlook.com 2 uploaded to Telegram on 03-Feb-2025. The file contains 751 email addresses, all tied to Outlook.com accounts, paired with plaintext passwords and linked URLs. Why This Is Dangerous: With plaintext passwords already attached to real Outlook.com addresses, an attacker does not need to guess or crack anything. They can log straight into email inboxes, which often serve as the recovery method for banking, shopping, and social media accounts. What Was Exposed: - Outlook.com email addresses - Plaintext passwords - URLs associated with each login Why This Matters: Email accounts are frequently the master key to someone's entire digital life, since a compromised inbox lets an attacker reset passwords on nearly any other service tied to that address. A leak of even 751 Outlook accounts can lead directly to account takeover, financial fraud, and identity theft if those inboxes are used to recover other logins. How a Combolist Like This Works: Attackers build combolists like this one by targeting a single email provider, gathering leaked or phished credentials for that domain, and packaging them together for easy resale or distribution. Focusing on one provider, in this case Outlook.com, makes the list more valuable to buyers who specialize in email account takeover. Check If You Are Affected: If you use an Outlook.com address, run it through HEROIC's free breach scanner to check it against more than 400 billion leaked records and see if your credentials appear in this or any other exposure.