Data Breach Lookup
Check whether your email, password, or phone number has appeared in a known data breach across 21+ billion leaked records.
Free to start · 21+ billion records · results in seconds
What a data breach lookup checks
A breach lookup compares the email, password, or phone number you enter against records exposed in past data breaches. It tells you which leaks an identifier showed up in and what was exposed alongside it, such as passwords, usernames, or other account details. The goal is to surface where your information is already public.
What to do if you have been breached
If an email or password turns up in a breach, change the password on that account and on any other account that reused it. Turn on two-factor authentication where it is offered. A password manager makes it easier to use a unique password for every login so a single leak does not put your other accounts at risk.
Check before attackers do
Breached credentials are traded and reused long after the original leak. Checking your own email and passwords lets you find exposed accounts before someone else does. Running a lookup periodically helps you catch new breaches as they are added.
Types of data exposed in breaches
Breaches expose different fields depending on what the company stored. Common ones include email addresses, passwords, phone numbers, and physical addresses. Leaked passwords matter most because they are often reused, so one exposed password can unlock several of your other accounts. A data breach checker tells you which of these fields showed up alongside your identifier.
Data breach vs info stealer logs
A normal data breach is a single company leaking its stored records, so the exposure is tied to one service. Info stealer logs are different: they come from malware running on your own device and capture whatever was on it, including saved passwords and active session cookies. Because stealer logs include session cookies, they can let someone into an account even without the password.
How often should you check?
New breaches surface continually, so a single check only reflects what was known that day. Asking "have I been breached" once is not enough. A periodic email breach check beats a one-time lookup because it catches leaks that appear after you last looked.
Frequently asked questions
Enter your email address in the search box above. The lookup checks it against known breach datasets and shows you which leaks it appeared in and what was exposed.