A billion records in six months. Our first half-yearly breach coverage report: what entered the index, what happened out there,
Our newly launched open-source Data Breach Monitoring Service is now available for public beta testing.
Ask how big a data breach is and the two honest answers are thirteen times apart. Median 1.14 million records,
24 hours, 756 users, 431 teams, 24 challenges, one person running all of it. The making of Watchlist CTF 2026:
You can change a leaked password in a minute. Try changing your date of birth. Five things a breach exposes
Verify a domain you own once, take the key from the dashboard, and one POST returns every breach touching your
Four field notes from reading 516 password-leaking breaches, an honest argument with the sceptic about single points of failure, and
516 of 783 catalogued breaches leaked passwords. 83 stored them in plaintext, 206 with weak hashing. At least 56% recoverable.
Nine breaches, 33.8 million records, a 29-day median delay, no passwords: August 2026 in the XposedOrNot index, and why it
Two free layers of breach alerting for your whole org: personal subscriptions plus domain-wide alerts with built-in acknowledgment. Setup in
Email is in all 779 breaches we index, without exception. Why it is the join key attackers use, and five
Entertainment leads by breach count (220 of 777), IT leads by records (4.65B). Why the ranking flips, what neither list
