The UHQ Hotmail Combo Leak Put 8,587 Email and Password Pairs Online
On October 6, 2024, HEROIC analysts found a combolist titled "UHQ Hotmail combo," uploaded to Telegram by a user known as professor66699. The file holds 8,587 records pairing email addresses with plaintext passwords and the URLs those logins were used on.
Why This Combolist Puts Accounts at Risk
The passwords in this file are unencrypted, so anyone who obtains it can immediately test each email and password pair against Hotmail, Outlook, and any other site where the same credentials might have been reused. No technical skill or password cracking is needed, only automated tools that run through the list.
What Was Exposed in the UHQ Hotmail Combo
- Email addresses
- Plaintext passwords
- URLs tied to each login
Why This Matters
Because email accounts are often the key to resetting passwords elsewhere, a compromised Hotmail login can give an attacker a path into banking, shopping, and social media accounts too. If your credentials are in this file and you have reused that password anywhere else, those accounts are exposed to takeover and fraud right now.
How Combolists Like This Get Assembled
Combolists are built by merging stolen credentials from stealer logs, phishing kits, and older breaches into one file. Sellers on Telegram label them "UHQ" (ultra high quality) to signal the logins are verified and still active, which makes them valuable to criminals running credential stuffing campaigns.
Check If You Are Affected
HEROIC's free breach scanner checks your email against over 400 billion leaked records, including this combolist. Run a free scan, and if you're affected, change that password everywhere you've used it.
Breach Breakdown
8,587 passwords exposed. Is yours one of them?
Enter your email to scan this breach plus 400B+ other leaked records. If you're compromised, we'll show you exactly where and what to change.
Free forever · No account required · Results in seconds
/img/qr-code.png)