16 Oct 2026 · HIPAA Journal
American Collection Medical Agency clients agreed to a $6.4 million settlement resolving claims over a major historical data breach. The cyberattack targeted AMCA's web payment portal and exposed sensitive personal, …
Individual · Free check
Is your email address in a public breach?
We watch monitored breach databases for your address, tell you what each breach exposed, and give you the steps to close it. Nothing else is read.
Problem: Enter a full email address, like [email protected].
No account needed. We keep the address you check, when, and how many breach records it was found in, to prevent abuse, until you ask us to delete it. Privacy
Breach records onlyNo accountFree
What the free check readsOne input
Your email address
- Shopping sites
- Payment accounts
- Crypto exchanges
- Travel and loyalty
- Streaming and games
- Work tools
- Forums
- Social networks
Illustration, not your resultIn a breachNot in one
A record can expose your email address, password, phone number, date of birth or home address.
Breach records. The public breaches your address appears in, with what each exposed.
Nothing else is readRead-only
01 · What the check covers
What it reads, and what it does not.
The free check reads
Breach records tied to your email address.Read
The full briefing adds
Steps for each breach, in order.
What each exposed field makes possible.
New breaches, re-checked daily, included for 14 days.
The Personal Exposure Briefing is optional and is offered only after your result. There is no price on this page.
02 · This week · 17 Oct 2026
How passwords and personal details were used against people this week, and what we check for you.
13 Oct 2026 · SecurityWeek
Meta notified approximately 1,500 people, mostly US employees, after hackers accessed some of the company's GitHub repositories. The attackers primarily obtained proprietary software code alongside mistakenly stored personal information.
- How they got in
- Stolen or reused passwords.
- What we check
- Your email address in monitored breach databases.
9 Oct 2026 · SecurityWeek
Domino's notified a small number of customers that unauthorized third parties accessed their accounts using credential stuffing. The attack relied on credentials leaked in unrelated breaches, and Domino's reset the …
- How they got in
- Stolen or reused passwords.
- What we check
- Your email address in monitored breach databases.
03 · Recent public breaches
Were you in any of these?
Disclosed 2026
Hackers breached the systems of Russian fast-food chain Dodo Pizza, accessing customer personal details and order histories. A hacking group named DataSuckers …
Disclosed 2024
A Ticketmaster / Live Nation breach exposed data belonging to approximately 560 million customers globally, including names, addresses, phone numbers, and partial …
Disclosed 2024
London Drugs, a major Western Canadian pharmacy retailer, was struck by a ransomware incident that forced the closure of all stores across …
Disclosed 2024
Snowflake customer accounts compromised via credential-stuffing with previously-stolen credentials. The attackers (UNC5537 / Scattered Spider / ShinyHunters) did NOT exploit a vulnerability …
Disclosed 2024
Largest healthcare data breach in US history. BlackCat (ALPHV) ransomware operators used stolen credentials to access Change Healthcare's Citrix remote-access service, which …
Disclosed 2023
Indigo, Canada's largest bookseller, was hit with a ransomware attack in early 2023 that disrupted online sales, in-store card payments, and gift-card …
04 · What to do first, free
Three steps anyone should take.
1
A unique password for each account
So one breach cannot open the others.
2
A password manager
It remembers the unique passwords for you.
3
Two-step sign-in
Turn it on for email first, then banking.
05 · Questions
What we store and who sees it.
What do you store?
The address you checked, when, the connection it came from and how many breach records it was found in, to prevent abuse. It is kept until you ask us to delete it. Running a check does not add you to any mailing list.
Who sees it?
You see the result, once you enter the code we send to that inbox. Our desk is told that a check was run, with the address masked; it sees the full address only if you tick the box to have your results emailed. We do not sell addresses. The service providers that process them for us are listed in our Privacy Policy.
How do I delete it?
Write to [email protected] and we delete it.
Does a breach mean I did something wrong?
No. A breach at a company is that company's breach.