US Users Hit: 2.5K Hotmail Combo List Leaks 2,100 Records

HEROIC analysts identified a stealer log dump labeled "2.5K Hotmail Combo list Full Valid," uploaded to a Telegram channel on 26-Jun-2026. The file contained 2,100 records tied to United States accounts, including email addresses, plaintext passwords, and the URLs of the Hotmail-linked sites where those logins were used.

Why US Users Are the Focus of This Hotmail Combo List Leak

This dump specifically collects credentials belonging to Hotmail and Outlook users located in the United States, making it a targeted resource for criminals looking to attack American consumers. Because the passwords are stored in plaintext and matched to the exact site each one unlocks, attackers can move straight to logging into these accounts without any extra effort.

What Was Exposed

• Email addresses
• Plaintext passwords
• URLs of the websites tied to each login

Why This Matters

Because the credentials are unencrypted and site-specific, this data enables immediate account takeover for any US user whose Hotmail password is still active. If that same password was reused on banking, shopping, or social media accounts, attackers can use credential stuffing to compromise those accounts as well.

How Stealer Logs Work

Stealer log malware infects a device, often through a fake download or malicious attachment, and quietly records saved passwords, autofill data, and browser session details as they are typed. The results are packaged into a log file, often relabeled a "combo list," and sold or shared on Telegram channels and dark web forums.

Check If You Are Affected

If you use a Hotmail or Outlook address in the United States, use HEROIC's free breach scanner to check whether your credentials appear in this or any other leak. It searches a database of more than 400 billion breached and leaked records to show you instantly if your information has been exposed.