Your Password Exposed: The Hotmail Fresh B4_Jx Leak Hit 1,316 Users

In April 2026, HEROIC analysts found a combolist titled "Hotmail Fresh B4_Jx" uploaded by a Telegram user. The file holds 1,316 records of Hotmail email addresses paired with plaintext passwords, along with the URLs those credentials were tied to. Why This Is Dangerous: the word Fresh in the file name signals that the uploader claims these are recently captured, currently working logins, not an old recycled list. Combined with plaintext passwords, that makes the credentials in this file immediately usable by anyone who downloads it. What Was Exposed: Hotmail email addresses, plaintext passwords, and URLs tied to each account. Why This Matters for Hotmail Users: a Hotmail inbox is often the recovery address for banking, shopping, and social media accounts. If an attacker logs into someone's Hotmail using credentials from this leak, they can reset passwords on other services through email based recovery links, turning one exposed inbox into a full account takeover across multiple platforms. How Fresh Combolists Are Made: lists marketed as fresh are typically built from recent phishing campaigns or active stealer malware infections rather than old public breaches, which is why sellers highlight the term to justify a higher price or faster sale. Buyers value fresh lists because the odds that the password still works are much higher than with older, previously exposed data. Check If You Are Affected: if you use Hotmail or Outlook, checking your exposure takes just seconds. HEROIC's free breach scanner searches more than 400 billion leaked records, including combolists like this one, so you can confirm whether your account was affected and change your password before it's used against you.