Check If Your Email Has Been Exposed in a Data Breach
Enter your email address to instantly see whether it has appeared in known data breaches — and get the full list, with what to do next, sent to your inbox.
How the check works
- You enter the email address you want to check.
- We match it against records from known data breaches.
- You get an instant verdict here, and the full breach list by email.
What your results mean
If your address appears in one or more breaches, it means your details were caught up when a company holding them was breached — not that your inbox itself has been broken into. The bigger the breach count, the more places your credentials may be circulating. A clean result is good news, but breach lists grow constantly, so it's worth checking again from time to time.
What to do if your email has been exposed
- Change the password on any account tied to this address — especially reused ones.
- Give every account its own unique password.
- Turn on multi-factor authentication on the accounts that matter most.
- Watch for phishing — attackers use breached details to make scams look convincing.
What is a data breach?
A data breach is when the information a company holds about its users — email addresses, passwords, and more — is stolen or exposed. That stolen data often ends up shared and traded online, where attackers reuse it against other accounts.
Why does my email appear in breach records?
Almost always because a service you signed up for was breached — not because you did anything wrong. You can't undo a breach, but you can stop it being useful to attackers by changing exposed passwords and turning on multi-factor authentication.
Frequently asked questions
Is it safe to enter my email address here?
Yes. The check runs against records from known data breaches, and the full results are sent to the address you enter — so only the owner of that inbox receives them.
How do I know if my email has been hacked, not just exposed?
This tool checks whether your address appears in known breaches. Active account compromise is different — look for unexpected sent messages, password-reset emails you didn't request, or unfamiliar logins, and secure the account if you see them.
Is my email on the dark web?
When addresses appear in data breaches, that stolen data often circulates in places ordinary users never see. This check searches records from publicly known breaches to tell you whether your address has been exposed.
What should I do first if my email is in a breach?
Change the password on any account tied to this address — especially if you reuse passwords — and turn on multi-factor authentication. Then stay alert for phishing messages that may reference your details.
How often should I check?
After any major breach you hear about, or every few months. New breaches surface all the time, and running this check is always free.
Check your exposure free
See your breach count here, and we'll email you the full list.