UHQ Hotmail Combo Leak Exposes 15,834 Microsoft Logins

A Hotmail-Focused Combo List Surfaces on Telegram

HEROIC analysts found a stealer log dataset called "UHQ Hotmail combo" shared in a Telegram channel on November 2, 2024. The file contains 15,834 records built specifically around Hotmail and Outlook accounts, pairing each email address with a plaintext password and the login URL the credentials were captured from.

Why This Is Dangerous

Because the file targets one email provider specifically, it gives attackers a ready-made list of active Microsoft accounts to test. Since the passwords are stored in plaintext, no cracking or decryption is needed, an attacker can copy a login and password directly into Outlook.com and attempt to sign in. A compromised Hotmail or Outlook account often unlocks far more than email: it can be used to reset passwords on other services, access saved files in OneDrive, or impersonate the account owner to contacts.

What Was Exposed

• Hotmail and Outlook email addresses
• Plaintext passwords
• Login URLs associated with each account

Why This Matters

Email accounts sit at the center of a person's digital identity. Anyone with access to a Hotmail or Outlook inbox can request password resets for banking, shopping, and social media accounts linked to that address, turning one exposed login into a much wider account takeover. Reused passwords compound the risk further, since the same plaintext password here may unlock accounts on entirely different platforms.

How Stealer Logs Work

Stealer log combo lists like this one are usually assembled from malware infections on victims' devices. Info-stealing malware scans the browser's saved logins and autofill data, then exports everything it finds. Criminals compiling this kind of list often filter the raw malware output down to one provider, in this case Hotmail and Outlook, because a focused list of active accounts from a single service is easier to sell or use for targeted attacks than an unsorted mix.

Check If You Are Affected

If you use a Hotmail or Outlook account, it is worth checking whether your email shows up in a leak like this one. HEROIC's free breach scanner searches more than 400 billion breached records, including stealer logs, so you can quickly see if your information has been exposed and take steps to secure your account.