A billion records in six months. Our first half-yearly breach coverage report: what entered the index, what happened out there,
Our newly launched open-source Data Breach Monitoring Service is now available for public beta testing.
Nobody who writes the rules has asked for a 90-day password change since 2017. Where the habit came from, what
Every widely reported Gmail data breach since 2014 was a stolen-login file from other sites that held gmail.com addresses. How
We classified all 792 breaches in our catalog by the cause the public description names. Only 1 in 4 from
Your email breach history is the list of every known breach your address is in, oldest first. Read it as
Five breaches, 13.6 million records, and two of them carry password hashes: September 2026 in the XposedOrNot index, why the
XposedOrNot’s MCP integration brings breach detection to Cursor, Windsurf, and Claude Desktop. Check any email for compromises without breaking flow.
Should you change your email address after a data breach? Almost never. The three cases where you should, what to
2026 now has 79 breaches in the XposedOrNot catalog by September, the most of any year we track, with three
A leaked email gets you spam. A leaked phone number gets you calls from people who already know your name.
Ask how big a data breach is and the two honest answers are thirteen times apart. Median 1.14 million records,
