Domain breach search: find leaked addresses at your domain
Search a domain to count the breach records that hold addresses at it. It is the fastest way to see how exposed a company’s staff are.
- Free, five checks a day
- Masked results
- For domains you look after
What a domain search shows
Staff sign up for outside services with their work address. When those services are breached, the work address leaks, sometimes with the password they use at work.
The size of the exposure
How many breach records hold an address at the domain, and how many breaches they come from. A useful number to track over time.
A sample of the records
A few records with the breach name and date, the masked address, and whether a password or hash leaked with it.
The breaches involved
The names of the breaches, which tell you which outside services your staff use and which ones have leaked.
Why it matters for a company
A leaked work address and password is one of the most common ways into a company. Attackers try leaked credentials against email, VPN and single sign-on portals, and a reused password is all they need.
Leaked addresses also make targeted phishing easy. A list of real staff addresses, with the services they use, is what a convincing fake invoice or password-reset email is built from.
After a domain search
Require two-factor sign-in
On email, VPN and single sign-on, so a leaked password alone opens nothing.
Reset what leaked with a password
Find the affected staff and have them change that password everywhere they used it.
Ban reused and known-leaked passwords
Many identity providers can refuse passwords that are known to have leaked.
The full records are on Seer
This site shows how many breach records hold what you searched, and a masked sample of them. The check is run by Seer, which shows the full records: which breach each came from, when, and what leaked with it.
Seer also searches stealer logs, the records malware takes from infected devices, and finds the social accounts tied to an email address, username or phone number.
Try Seer’s free check- Breached credentialsEvery record an email address, username, phone number or domain appears in.
- Stealer logsLogins captured by malware on infected devices, searchable by email, username or domain.
- Social accountsAccounts on 740+ platforms by username, 106 by email address and 20 by phone number.
- Plans and pricingWhat a free account includes, and what the paid plans add.
Questions
What does a domain breach search show?
How many breach records hold an email address at the domain you search, and a masked sample of them. It is the quickest measure of how exposed a company’s staff or a family’s shared domain are.
Who should search a domain?
Whoever looks after it: an IT or security team, a business owner, or someone running a personal domain. Search the domains you are responsible for.
Should I type the address with https or www?
No need. Type the domain on its own, as in example.com. A pasted web address is trimmed to its domain.
How do I see every leaked address at our domain?
Seer lists every record for a domain, with the address, the breach and what leaked with it, and also searches stealer logs for logins at the domain captured from infected devices.