Your Hotmail Could Be Among 1,254 Leaked in TXT Cloud Dump

If you use Hotmail and haven't changed your password in a while, this next part is for you. On October 14, 2025, a Telegram post labeled TXT Cloud dropped 1,254 sets of what it called fresh Hotmail credentials, meaning the accounts had reportedly been verified as still working at the time of posting.

Why This Is Dangerous

The word fresh is doing a lot of work in that listing name. Sellers use it to signal that the credentials have been tested and confirmed to still log in, which makes this file more dangerous than an old, stale dump nobody bothered to check. Combined with the fact that the passwords sit in plaintext rather than encrypted, anyone downloading this file gets working logins ready to use right away.

What Was Exposed

• 1,254 Hotmail email addresses, described by the seller as verified active
• Plaintext passwords attached to each address, with zero encryption
• URLs showing precisely where each set of credentials was pulled from

Why This Matters

People tend to asume their email account is the least important thing to protect, but it's usually the opposite. A Hotmail inbox often connects to password reset links for banking, shopping, and social accounts, so anyone who gets in can chain their way into a whole seperate set of accounts just by clicking forgot password over and over. That one login becomes a master key.

How Fresh Stealer Logs Get Made

This one is filed as a stealer log, a breach type built entirely different from a hacked corporate database. Malware infects a personal device, often disguised as a cracked app or a free download, then copies every saved password out of the browser before sending it off to whoever controls the malware. Sellers then run a quick check to see which logins still work, label the surviving batch fresh, and post it for sale or free download, exactly as happened here under the name TXT Cloud.

Check If You Are Affected

HEROIC tracks more than 400 billion exposed records across breaches like this one, and running your email through HEROIC's free scanner takes only a moment. You'll see right away if your address turns up in this leak or any other lurking in the dataset. It's a small step that can save you a huge headache down the road.