Your Hotmail Login Could Be Exposed in the AnonymousRichard Leak

HEROIC analysts found this file on Telegram on May 25, 2026. A Telegram user going by AnonymousRichard uploaded a combolist containing 1,035 records of email addresses and plaintext passwords tied specifically to Hotmail accounts, along with their login URLs. Why This Is Dangerous: Hotmail and Outlook accounts are often used as the recovery email for other services, including banking and social media. A working Hotmail login lets an attacker read someone's messages, reset passwords on connected accounts, and impersonate the victim in emails to contacts. What Was Exposed: - Email addresses - Plaintext passwords - Hotmail login URLs Why This Matters: Because email is the backbone of most account recovery systems, a compromised Hotmail login can cascade into other accounts. If your password here is reused elsewhere, attackers can attempt credential stuffing against banking, shopping, and social media sites, leading to account takeover, identity theft, or financial fraud. How a Targeted Webmail Combolist Like This Works: Combolists focused on one email provider, like this Hotmail-only file, are usually built by filtering a larger stolen credential set down to just the addresses ending in that provider's domain, or by phishing pages designed to look exactly like the provider's real login page. Distributors like AnonymousRichard then share these targeted lists to appeal to buyers who want a specific type of account. Check If You Are Affected: HEROIC's free breach scanner checks your email against more than 400 billion breached and leaked records. Run a free scan to see if your Hotmail or Outlook account has been exposed.