Directory
Explore Breach & Leak Research resources in Dark Web & Underground.
A tool for checking whether an email address appears in the Ashley Madison breach data. The site states about 36 million accounts were compromised, including some duplicate email addresses, and advises changing passwords. It also notes that Ashley Madison did not validate account email addresses.
Searchable timeline of publicly reported breaches with affected organizations, dates and data types.
eCrime.ch is an extortion exposure monitoring platform for enterprise security, incident response and third-party risk teams. It detects, verifies and delivers ransomware and data-leak signals with context such as entity mapping, artifacts, links and timelines. The site states it monitors 280+ extortion and leak sources and delivers alerts through dashboard, email, Slack, API and reports. A REST API provides tracker, intelligence, file-search, screenshot, actor, leak-site and torrent-monitoring data.
Checker for seeing whether a phone number or profile appears in Facebook-related breach data.
Have I Been Pwned is a data breach search and notification service. It lets users check whether an email address appears in known data breaches and lists instances where data was found in paste records. It also offers an MCP server that connects AI agents to breach, password, paste, domain and stealer log data.
Identity Theft Resource Center database documenting publicly reported US data compromises.
Leak-awareness search page for checking whether identifiers appear in exposed datasets.
Leakedpassword.com searches across multiple data breaches to check whether a password has been compromised. It also provides an API for use in signup processes to validate users' passwords, drawing its data from Have I Been Pwned and requiring no authentication.
Mozilla service that checks email addresses against known breaches and explains protective steps.
Cybernews checker for seeing whether an email or phone appears in known data leaks.
RansomLook is an open-source intelligence site that tracks ransomware groups, markets and threat actors, displaying posts and activity statistics. It reports 35,915 ransomware posts across 634 groups, 147 markets and 32 actors, alongside leak, ransom note and crypto address counts. An API and torrent intelligence features are listed.
Open-source tracker monitoring ransomware leak sites and publishing structured status data.
Details from each project's website. Open a listing for its full overview.
