Devanand Premkumar has 17+ years of experience in IT/ITES environment by identifying, planning and executing information security operations, increasing security & compliance and implementing global information security programs. Has been instrumental in designing, developing, maintaining security frameworks and technical controls in various geographies across the globe. Has played various roles in technical as well as non-technical aspects of Information Security. My last corporate engagement was handling an intelligent SOC serving global customers for their security requirements in the role of Delivery Director.

Since forensics and investigations interests me a lot, started off a small exercise to check the level of data available in public domains related to data breaches. Considering the large volume of data aggregated and in the best interest of people and me wanted to keep it open for all to make use.

Currently providing consultancy for startups and organisations to check and support in their effective and efficient compliance for implemented information security controls.

XoN was started as a simple exercise to work with cloud and related technologies. However, looking at the huge size of private data exposed, particularly on exposed data on breached data,I am planning to keep this site open to the public as a free service.

Thereby this also helps all of us to get more information about the scope of data exposure and get alerted in case of new breaches which are getting more frequent in the past few months/years.

Folks can use this site as a simple reference to know about their data exposure from breaches. Email address can be used to verify if that particular email was part of the breached data. Knowing the breach status, users can take appropriate action to safeguard their accounts.

Next steps include changing password, monitoring accounts and making use of individual passwords on websites can help a lot.

You can also read the "Guide on Password Security" to know more about account security requirements.

Most of the exposed data are sourced from breaches available in the Internet.These data breaches are available on websites and pretty easy for a person who is searching properly. Few of them are sourced through Peer-to-Peer (P2P) technologies like torrents as well.

XoN stores only the email and the name of the website it got breached. In other words, plain text passwords and other sensitive data are not stored for obvious reasons as the storage of that would bring in more issues than benefit to the public.

XoN also has the feature of checking breached passwords collection. This service makes use of SHA3-keccack 512 hashing algorithm for converting the collected passwords into one way hashes in storage. With the current technologies available, it is highly unlikely someone can re-verse this SHA-3 Keccak hashes easily. This ensures the highest level of safety for stored hashes.

Please check the sample login page, making use of this XoN Passwords. This can help a lot of users, preventing them from reusing old and exposed passwords.

Generally it is not recommended sharing the sources of breaches, considering the sensitivity and the amount of data being exposed. All the available data are loaded into XoN and is available to be queried through the website and API for each email.

Yes, please feel free to make use of the AlertMe Service, which can let know of xposed data. Alert me as a service can be invoked while searching in email or password verification pages.