XposedOrNot is a free, open-source data breach check covering 11.6 billion records across 787 breaches. Enter an email address to see which breaches contain it, what data each one exposed, and what to do about it. No account, no payment, and the address you check is not stored.
- 787 breaches
- 11.6 billion records
- 753 verified
How to check for a data breach
It takes about ten seconds.
- Type your email address in the box above.
- Read the list of breaches that contain it. Each one shows the date and what was exposed.
- Follow the steps further down this page for the kinds of data that were exposed.
Check every address you use: work, personal, and the old one you still log in with.
What the results tell you
Sample result
- Breach
- Example Shop (sample)
- Date of breach
- March 2024
- Records
- 2.1 million
- Data exposed
- Email addresses, Passwords, Phone numbers
- Password risk
- Easy to crack
- Verified
- Yes
Breach is the company or service the data was taken from. It is often a site you signed up to years ago.
Data exposed lists what was in the stolen file next to your email. This is the line that decides what you do next.
Password risk tells you how the passwords were stored. "Plain text" means anyone with the file can read them. "Easy to crack" means they were scrambled weakly. "Hard to crack" means they were scrambled well, which buys you time but is not a reason to keep the password. "Unknown" means we could not confirm how they were stored, so treat the password as exposed.
The 10 newest breaches in this check
New breaches are added as soon as they are verified. These are the latest ten.
| Breach | Date added | Records | Data exposed |
|---|---|---|---|
 McKesson (opens in new tab) |
Oct 2, 2026 | 6,832,822 | Email addresses, Names, Phone numbers , Physical addresses, Dates of birth, Genders |
 LegionProxy (opens in new tab) |
Sep 28, 2026 | 10,148 | Email addresses, Names, Passwords |
 Chess (2026) (opens in new tab) |
Sep 27, 2026 | 4,656,591 | Email addresses, Names, Usernames , Geographic locations |
 Fanlore (opens in new tab) |
Sep 25, 2026 | 145,195 | Email addresses, Names, Passwords , Usernames |
 Baxter International (opens in new tab) |
Sep 4, 2026 | 488,992 | Email addresses, Names, Geographic locations , Physical addresses, Nationality |
 Manchester Airports Group (opens in new tab) |
Sep 3, 2026 | 8,379,476 | Email addresses, Names, Phone numbers , IP addresses, Vehicle registration numbers, Geographic locations, Browser user agents |
 Sharecare (opens in new tab) |
Aug 31, 2026 | 326,356 | Email addresses, Names, Phone numbers , Titles, Geographic locations, Physical addresses |
 Lumenis (opens in new tab) |
Aug 30, 2026 | 384,244 | Email addresses, Names, Physical addresses , Phone numbers, Geographic locations, Dates of birth |
 Carhartt (opens in new tab) |
Aug 26, 2026 | 24,922,471 | Email addresses, Names, Phone numbers , Physical addresses, Dates of birth |
 Questel (opens in new tab) |
Aug 25, 2026 | 1,744,241 | Email addresses, Physical addresses, Dates of birth , Phone numbers |
See all 787 breaches in the full list, or the totals by year and data type on our repository page.
Have I been hacked? How to read the signs
Being in a breach and being hacked are not the same thing. A breach means your details were in a file stolen from a company. Being hacked means someone got into one of your accounts.
A breach makes a hack more likely, mostly when you reused the password somewhere else.
Signs that someone is in your account:
- Password reset emails you did not ask for.
- Login alerts from a place or device you do not know.
- Messages or posts you did not send.
- Charges or orders you do not recognise.
- You are locked out, and your password no longer works.
If you see any of these, change that password now from a device you trust, and turn on two-step login.
What to do if you are in a breach
What you do depends on what was exposed. Find your "Data exposed" line and follow the matching steps.
Tick each step when it is done, or when it does not apply to you.
0 of 6 steps done
How our data is sourced and verified
Every breach is checked before it goes in. It needs either a statement from the affected company or coverage by the press, and each entry carries its reference. Today 753 of the 787 breaches carry the Verified tag.
We keep email addresses and the public facts about each breach. We never keep the stolen passwords in readable form, card numbers, ID documents or other sensitive data.
The whole process is written up on our methodology page, and the code is open source.
Data breach check: questions and answers
How do I check for a data breach?
Type your email address into the box at the top of this page. You will see every breach in our index that contains it, with the date and the kinds of data exposed. It is free and needs no account.
Have I been hacked?
Not necessarily. Being in a breach means your details were in a file stolen from a company, not that someone is in your account. Check for the signs listed above, and change any password you reused.
Is this data breach check free?
Yes. The check is free, with no account and no payment. XposedOrNot is open source and has run as a free service since 2017.
How many breaches do you check?
787 breaches holding 11.6 billion records, and the list grows as new breaches are verified. The ten newest are shown on this page.
What should I do if my email is in a breach?
Look at what was exposed, then act on that. If passwords were exposed, change that password everywhere you used it and turn on two-step login. The steps for each kind of data are listed above.
How is this different from a password check?
This page checks an email address and shows which breaches contain it. The password leak check tests a password on its own, without your email, to see if it appears in known leaks. Use both.