Have I Been Pwned is a data breach search and notification service. It lets users check whether an email address appears in known data breaches and lists instances where data was found in paste records. It also offers an MCP server that connects AI agents to breach, password, paste, domain and stealer log data.
Directory
Search results
Published directory entries matching your search.
Searchable timeline of publicly reported breaches with affected organizations, dates and data types.
Identity Theft Resource Center database documenting publicly reported US data compromises.
Leakedpassword.com searches across multiple data breaches to check whether a password has been compromised. It also provides an API for use in signup processes to validate users' passwords, drawing its data from Have I Been Pwned and requiring no authentication.
Email Breach Analysis is a free service that checks whether an email address appears in hacked data from known database breaches. It returns a summary of information that may be at risk, critical identity alerts, and a relative exposure rating.
This is a no-longer-maintained Google Sheets resource collection compiled by AaronCTI, with its updated version hosted at OSINTPORTAL.COM. It categorizes links to cyber threat intelligence and open source intelligence resources for lookups including email addresses, IP addresses, social media profiles, and data breaches.
DeadStack aggregates recent technology and business news stories, each with a headline and links to coverage from other outlets. Items cover topics such as stablecoins, semiconductor investment reviews, funding rounds, data breaches and corporate deals, with some entries including short summaries.
Leak Lookup is a data breach search engine for searching database leaks and dumps. It offers username, email and IP address lookups across thousands of breaches to help track credentials compromised in the wild. A hash API provides hash-cracking capabilities and an API key is required to make requests.
Mozilla service that checks email addresses against known breaches and explains protective steps.
Scattered Secrets is a service that lets users search data breaches to see whether their password has been compromised. Its site describes how cybercriminals collect stealer logs and crack passwords to take over accounts, and presents the service as protection against account takeovers. A free account is offered.