Enter your email and see which publicly known breaches it appears in, what each one exposed, and the steps to take next.
You get told your details were caught up in a breach, but not which breach, what it exposed, or what to do first.
Most breach notices are short on detail. They name a company, maybe a date, and leave you guessing about the rest.
We fill the gap. A data breach check shows the publicly known breaches linked to your email and spells out what each one exposed, from passwords to phone numbers and dates of birth.
From there you get a plain plan, most important steps first, so you fix the things that matter before the smaller ones. We never search, buy or hold stolen data, and we cannot remove your details from a breach, so the advice is honest about what you can and cannot change.
01 · 01
Work through the recovery plan in order of impact, so you fix the account that matters most before anything else.
02 · 02
Check a suspicious text, email, link or QR code before you tap anything, and learn how to judge it for yourself.
03 · 03
Record what happened, track the steps you have taken and keep notes in one place with the free Incident Desk.
04 · 04
Use the opt-out helper and the deletion request writer to ask people-search sites and companies to take your details down.
Three plain stages take you from a worried question to a clear plan you can act on today.
Enter your email address. We check it against publicly known breaches and show which ones it appears in. No account, no payment, and no sign-up required to see your result.
Each result lists what that breach exposed, such as passwords, email addresses, phone numbers or dates of birth, and explains in plain words what that means for you and which risks matter most.
Follow the plan in order: secure your email account first, change any reused passwords, turn on multi-factor sign-in, then stay alert for scam messages that use the leaked details to sound convincing.
Enter an email address and see which publicly known breaches it appears in, what each one exposed and the steps to take. Free and no account needed. The checked address is stored only as a masked version and a one-way hash, never in full.
Guidance for a phone number, including how to reduce SIM-swap risk and remove the number from people-search sites. It gives guidance, not a breach lookup.
A page for each publicly known breach with what was exposed and what to do, plus breaches grouped by year.
A page for each kind of exposed data, such as passwords, phone numbers, addresses and dates of birth, with the risk and what to do.
Plain-language guides on breaches, scams, accounts and privacy.
With a free account, after you confirm you own the inbox, your account email is re-checked daily and you are emailed only about new publicly known breaches.
A free account space to record what happened, track the steps you have taken and keep notes for a breach, scam message, phishing link, QR code, hacked account, identity misuse or voice call.
With a free account, save domains and watch their email security grade over time, with an export and an embeddable badge.
A password strength checker, a password generator and a passkey readiness check. Never type a password you actually use.
A scam message checker, phishing link checker, QR code checker and voice scam checker that help you judge a message, though they cannot confirm one is safe.
An email header analyser, email security check and domain scorecard explained in plain words for small businesses and IT helpers.
Check where a username appears so you can see your public footprint.
A simple score to help you understand your overall exposure and what to improve.
Help with opting out of people-search and data broker sites.
Help writing a request to a company to delete your personal data.
A fair comparison of protection service types, such as password managers, identity monitoring, data removal and VPNs, with the free step to take first. Some outbound links are affiliate links and this is disclosed.
Download everything held about you, or delete your account and its data, at any time.
See what is already exposed, then follow the plain plan to close the gaps.
No account needed, and the address you check is stored only masked and hashed.