A Reddit user claims they successfully logged into a Microsoft Outlook account allegedly linked to Jeffrey Epstein using credentials found in recently released Department of Justice files.
A post that went viral within hours, racking up over 1,800 upvotes, sparked a rush of people attempting to access the same account and stirred serious concerns about personal data exposure in the DOJ’s massive document release.
Just days earlier, the Justice Department released 3.5 million pages of Epstein investigation files under the Epstein Files Transparency Act. NPR reported several instances of unredacted personally identifiable information slipping through, despite promises to protect victim privacy.
User explorer-200 shared the account credentials publicly, inviting others to poke around. Multiple commenters confirmed they got in too, with some changing the profile picture and exploring connected services like OneDrive and Xbox accounts. The account appeared largely empty, with just one email visible in the inbox from June 2019.
One commenter noted someone had accessed the OneDrive three days before the Reddit post, with folders marked as modified on January 31 at 11:10 PM CST. A personal vault section required two-factor authentication that had been updated on February 3. This suggests the account was targeted and potentially cleaned out right after the DOJ file release.
The DOJ had warned that the Epstein Library “may inadvertently include non-public personally identifiable information” and asked people to report problematic disclosures to [email protected]. The credentials appearing in those files would certainly qualify as a disclosure problem.
The Reddit thread quickly became chaotic, with users joking about sending emails from the account and changing profile details. One person discovered an Xbox account (PoorlyNewt#8871) also tied to the credentials. This post was also amplified on X by @hotgirlcapital, whose post now has over a million views.
Microsoft has not commented on whether they’ve secured the account or observed unusual access patterns. Unauthorized access to someone else’s email account, even with a publicly available password, can carry legal consequences under the Computer Fraud and Abuse Act.
That said, if you’re looking for a better way to browse through the data dump, you can check out the vibe-coded by developers who built Gmail clones and other apps specifically for browsing Epstein emails in a familiar interface.


