Welcome
How is this calculated?
The score weighs four things: how many breaches your email appears in, how recent they are, whether passwords were exposed and how they were stored (plaintext weighs most, strong hashes least), and whether sensitive data or stealer-log captures are involved. One recent plaintext exposure can outweigh several old, well-hashed ones.
What to do next
When you were exposed
Industries that leaked your data
Your biggest breaches
My Breaches
Every breach that exposes this email, newest first.
| Details | Breach | Year | Added | Accounts in the breach | Exposed data | Password | Industry |
|---|
Want the full visual report with heat maps and attack paths? Open your detailed report (opens in new tab).
Alerts
Alert settings for this email, and every new-breach alert for your monitored domains.
Turn off email breach alerts for this email?
- This also removes your access to this dashboard. The sign-in link that opens it comes from your alert subscription, so once alerts are off, this dashboard will no longer open.
- You can re-enable alerts anytime from the sign-in page, and your dashboard becomes visible again.
- We will email you a confirmation link. Alerts and dashboard access stay on until you click it.
My Circle
Help protect family and friends by keeping an eye on their breach exposure, with their consent.
Privacy
Control how this email appears in public breach searches on XposedOrNot.
My Domains
Company-wide exposure for your verified domain.
Recent breaches
Most exposed people
Exposure over time
Breach Analysis
Every exposure across your monitored domains. Filter, search, export.
| Breach | Year | Exposed data |
|---|
Top breaches by exposed employees
VIP Dashboard
Exposure for your executives and senior leaders, the accounts attackers target first.
| Seniority | Breaches | Found in |
|---|
Phishing Analysis
Find live lookalike domains that could be used to phish your people or customers.
These lookalike domains resolve today and could be used to impersonate your domain. Review each one for phishing risk.
| Live lookalike domain | Status |
|---|
API Keys
Query your domain exposure programmatically with the free domain API.
Your key
Treat this key like a password: it unlocks breach data for every domain you have verified.
Generating a new key revokes the old one immediately.
Use your key
Send the key in the
x-api-key header. The
response covers every verified domain on this account, as JSON.