A billion records in six months. Our first half-yearly breach coverage report: what entered the index, what happened out there,
Our newly launched open-source Data Breach Monitoring Service is now available for public beta testing.
Four field notes from reading 516 password-leaking breaches, an honest argument with the sceptic about single points of failure, and
516 of 783 catalogued breaches leaked passwords. 83 stored them in plaintext, 206 with weak hashing. At least 56% recoverable.
Nine breaches, 33.8 million records, a 29-day median delay, no passwords: August 2026 in the XposedOrNot index, and why it
Two free layers of breach alerting for your whole org: personal subscriptions plus domain-wide alerts with built-in acknowledgment. Setup in
Email is in all 779 breaches we index, without exception. Why it is the join key attackers use, and five
Entertainment leads by breach count (220 of 777), IT leads by records (4.65B). Why the ranking flips, what neither list
Your company’s breach exposure, read the way an attacker reads it: what each dashboard panel means, what bad looks like,
Median gap between a breach happening and the data surfacing publicly: 1,591 days, across 776 breaches. The analysis, the caveats,
Thirteen breaches, 58.4 million records, and a median 152-day delay: July 2026 in the XposedOrNot index, plus five reported breaches
Check any email against 772 known breaches free, read what actually leaked, and fix the right things in the right
