The X1428 HQ H0tmail Leak Exposed 1,345 US Hotmail Accounts

X1428 HQ H0tmail Combolist Exposes 1,345 US Account Credentials

HEROIC analysts identified a combolist named X1428 HQ H0tmail circulating on Telegram, dated 25 July 2026. The file contained 1,345 records tied to United States accounts, pairing email addresses with plaintext passwords along with URLs showing which accounts each login was meant to unlock.

Why This Is Dangerous

The label HQ, short for high quality, suggests these credentials were checked before being packaged for distribution. Paired with plaintext passwords sitting right next to each account, this file gives an attacker a ready-to-use set of logins with no cracking or guessing required.

What Was Exposed in the X1428 HQ H0tmail Dump

• Email addresses
• Plaintext passwords
• URLs tied to each credential pair

Why This Matters for These 1,345 US Accounts

A Hotmail or Outlook account is often used to recover passwords for banking, shopping, and social media logins, which makes it a valuable target on its own. Attackers use combolists like X1428 HQ H0tmail for credential stuffing, automatically testing the same email and password pair across other platforms. If a password was reused, this leak can lead directly to account takeover, identity theft, or financial fraud.

How a Telegram Combolist Like This Gets Verified and Shared

A combolist is a collection of username or email and password pairs, usually gathered from older breaches, stealer logs, or scraped data. A file labeled HQ typically means someone checked the logins to confirm they still work before packaging and distributing it, in this case through a Telegram channel with 1,345 US-focused Hotmail entries.

Check If You Are Affected

If you use a Hotmail or Outlook address, it is worth checking whether it appears in the X1428 HQ H0tmail leak or any other breach HEROIC tracks. HEROIC's free scanner checks your information against a database of more than 400 billion breached records and tells you immediately if you have been exposed.