The Piecehk 4 Hotmail Dump Exposed 1,574 US Email Accounts

The Piecehk 4 Hotmail Dump Targeted US Email Accounts

On June 20, 2025, HEROIC analysts tracked a combolist labeled "PRIVATE HOTMAIL UHQ BY PIECEHK 4" spreading on Telegram. The file contains 1,574 records, each pairing a Hotmail or Outlook style email address with a plaintext password and the URL the login was used on, with the accounts tracked as based in the United States.

Why This Is Dangerous

The "UHQ," or ultra high quality, label used in the file's name signals that the uploader claims these are verified, working credentials rather than an unfiltered scrape. Because the 1,574 passwords are stored in plaintext, an attacker can use any of them immediately against the account's inbox or any other site where the password was reused.

What Was Exposed in the Piecehk 4 Hotmail Leak

• Email addresses (Hotmail and Outlook style accounts)
• Plaintext passwords (not hashed or encrypted)
• URLs tied to each set of credentials

Why This Matters for US Account Holders

When a combolist is compiled around accounts from a single country, it becomes easier for attackers to pair the leaked credentials with other regional data, such as phone number formats or common service providers, to run more convincing credential stuffing and phishing attempts. If your Hotmail or Outlook account is among these 1,574 records, the same reused password could expose your banking, shopping, or social accounts to account takeover, identity theft, and financial fraud.

How "UHQ" Combolists Like This One Are Verified

Files labeled UHQ are typically run through automated login checker tools that confirm each email and password pair actually authenticates before it is included in the final list. This verification step is what separates a "UHQ" combolist from a raw, untested data dump, and it is also what makes the credentials inside more immediately dangerous.

Check If You Are Affected

If you hold a Hotmail or Outlook account, checking your exposure takes seconds. HEROIC's free breach scanner searches more than 400 billion leaked records, including verified combolists like the Piecehk 4 Hotmail dump, so you can confirm whether your credentials were part of this leak.