A billion records in six months. Our first half-yearly breach coverage report: what entered the index, what happened out there,
Our newly launched open-source Data Breach Monitoring Service is now available for public beta testing.
2026 now has 79 breaches in the XposedOrNot catalog by September, the most of any year we track, with three
A leaked email gets you spam. A leaked phone number gets you calls from people who already know your name.
Ask how big a data breach is and the two honest answers are thirteen times apart. Median 1.14 million records,
24 hours, 756 users, 431 teams, 24 challenges, one person running all of it. The making of Watchlist CTF 2026:
You can change a leaked password in a minute. Try changing your date of birth. Five things a breach exposes
Verify a domain you own once, take the key from the dashboard, and one POST returns every breach touching your
Four field notes from reading 516 password-leaking breaches, an honest argument with the sceptic about single points of failure, and
516 of 783 catalogued breaches leaked passwords. 83 stored them in plaintext, 206 with weak hashing. At least 56% recoverable.
Nine breaches, 33.8 million records, a 29-day median delay, no passwords: August 2026 in the XposedOrNot index, and why it
Two free layers of breach alerting for your whole org: personal subscriptions plus domain-wide alerts with built-in acknowledgment. Setup in
