Have I Been Pwned is a data breach search and notification service. It lets users check whether an email address appears in known data breaches and lists instances where data was found in paste records. It also offers an MCP server that connects AI agents to breach, password, paste, domain and stealer log data.
Directory
Search results
Published directory entries matching your search.
Email Breach Analysis is a free service that checks whether an email address appears in hacked data from known database breaches. It returns a summary of information that may be at risk, critical identity alerts, and a relative exposure rating.
A tool for checking whether an email address appears in the Ashley Madison breach data. The site states about 36 million accounts were compromised, including some duplicate email addresses, and advises changing passwords. It also notes that Ashley Madison did not validate account email addresses.
h8mail is a Python tool for email OSINT and password breach hunting. It finds passwords through breach and reconnaissance services or local data, supports premium lookup services, and can search .txt and .gz files locally using multiprocessing.
Breach exposure lookup service for checking whether an email appears in known breach datasets.
Mozilla service that checks email addresses against known breaches and explains protective steps.
Cybernews checker for seeing whether an email or phone appears in known data leaks.
Command-line tool for checking which known breaches may be linked to a target email address.
This is a no-longer-maintained Google Sheets resource collection compiled by AaronCTI, with its updated version hosted at OSINTPORTAL.COM. It categorizes links to cyber threat intelligence and open source intelligence resources for lookups including email addresses, IP addresses, social media profiles, and data breaches.
Checks whether a phone number or email appears in Facebook-related data exposure collections.
OSINT search platform for finding emails, domains, files, leaks, and public records across sources.
Leak Lookup is a data breach search engine for searching database leaks and dumps. It offers username, email and IP address lookups across thousands of breaches to help track credentials compromised in the wild. A hash API provides hash-cracking capabilities and an API key is required to make requests.
LeakPeek is a search service for checking whether an email, username, phone number or password has appeared in a data breach or password leak. It also offers searches of US and UK public records and a face search of public websites. Membership plans range from a 24-hour trial to three months of access.
A user-friendly Python toolkit for open source intelligence, providing key features such as image geolocation, social media profiling, email breach checks, domain lookup, metadata extraction, Google dorking, Wayback Machine queries, IP geolocation with blacklist checks, reverse image search, among others.