Check if your email has been in a data breach
Type an address to see how many breach records hold it, which breaches they come from, and whether a password or other details leaked with it.
- Free, five checks a day
- Masked results
- Nothing is sent to the address
What the email check finds
An email address is in almost every breach, because it is what people sign in with. That makes it the first thing to check.
Every record with the address
The count of breach records that hold the address exactly as you typed it, and how many separate breaches they come from.
Whether a password went with it
For each record in the sample: a password, a password hash, an IP address, a phone number or a name, if any of them leaked beside the address.
Which breaches, and when
The names of the breaches and the month of each, so you can tell which accounts were involved and which passwords to change.
Why an email in a breach matters
A leaked address on its own mostly means spam and phishing, often written to look like the company that was breached. The real danger is a password leaked beside it.
Breached sign-in details are gathered into large lists and tried automatically against email, banking and shopping sites. If you used the same password anywhere else, that account is open to whoever runs the list, years after the original breach.
So when an address turns up, look at what leaked with it, then follow the steps in what to do after a data breach.
Check every address you have used
Most people have more addresses in breach data than the one they use today:
- a school or university address
- an old work address, from a job you have left
- the address you signed up for shops and newsletters with
- an old free webmail account you no longer open
Each is searched separately, and each counts as one of the day’s five free checks. The username check finds records that hold no email at all.
The full records are on Seer
This site shows how many breach records hold what you searched, and a masked sample of them. The check is run by Seer, which shows the full records: which breach each came from, when, and what leaked with it.
Seer also searches stealer logs, the records malware takes from infected devices, and finds the social accounts tied to an email address, username or phone number.
Try Seer’s free check- Breached credentialsEvery record an email address, username, phone number or domain appears in.
- Stealer logsLogins captured by malware on infected devices, searchable by email, username or domain.
- Social accountsAccounts on 740+ platforms by username, 106 by email address and 20 by phone number.
- Plans and pricingWhat a free account includes, and what the paid plans add.
Questions
How can I tell if my email has been leaked?
Search the full address here. If it appears in breach records you see how many, which breaches they come from, and whether a password, a password hash or other details leaked with it.
What does it mean when my email is in a breach?
A company or site that held your address lost a copy of its data, and that copy is now in circulation. The address on its own mostly brings spam and phishing; the risk grows with what leaked beside it, a password above all.
Should I change my email address after a breach?
Usually not. An address can’t be un-leaked, and changing it is a lot of work. Change the password for the breached site and anywhere you reused it, and turn on two-factor sign-in. That closes the door the leak opens.
Do plus addresses and dots count as different emails?
The check looks for the address exactly as you type it. If you sign up with variations such as [email protected], search each one you remember using.
How often should I check?
Every few months, and whenever a service you use announces a breach. Breach data often turns up long after the breach itself.