Was Your Hotmail Password Leaked? 503 Records Exposed

HEROIC Analysts Flag a Second Hotmail Combolist Circulating on Telegram

On December 15, 2024, HEROIC analysts identified a combolist uploaded by a Telegram user containing 503 records of email addresses, plaintext passwords, and associated URLs. Like similar files shared in the same channel, this list was made freely available for download, putting every affected account at immediate risk.

Why This Is Dangerous

Because the passwords in this list are stored in plaintext, no cracking or guessing is required. Anyone who downloads the file can log straight into the associated Hotmail accounts, read private emails, reset linked passwords, and lock the real owner out entirely. From there, an attacker can pivot into any other service tied to that inbox.

What Was Exposed

• Email addresses (Hotmail/Outlook accounts)
• Plaintext passwords
• Associated URLs

Why This Matters

Credential stuffing attacks rely on exactly this kind of data, a ready-made list of usernames and passwords that can be automatically tested against banking portals, retail accounts, and social media logins. If any of these 503 people reused their Hotmail password on another site, they face a direct path to account takeover, identity theft, and financial fraud.

How Combolists Work

A combolist is a plain text file pairing emails or usernames with passwords, usually gathered from older leaks, phishing pages, or infected devices and then compiled for easy reuse. Combolists are prized by attackers precisely because they require no technical skill to exploit, just a list of login pages and automated software to try each pair until one works.

Check If You Are Affected

Anyone with a Hotmail or Outlook account should confirm whether their credentials are part of this leak. HEROIC's free breach scanner searches a database of more than 400 billion leaked records, giving you an immediate answer and a clear path to reset any exposed passwords before they are used against you.