BreachDirectory ∙ Data Breach Search Engine

When compromised data includes (Expand/Collapse):

Usernames – be aware that attackers now know the alias you've used to access the service in question. Usernames alone usually aren't sufficient to mount any attacks that would endanger your identity, but when taken with other data classes, usernames are often used to mount credential stuffing and other attacks. Email Addresses – be aware that attackers now know the email address you've used to access the service in question. Email addresses alone aren't sufficient to mount any attacks that would endanger your identity, but when taken with other data classes, usernames are often used to mount credential stuffing and other attacks. Password Hashes – pay extra attention to the hashing method that was used on the service and whether password salting is in use. Hashing methods refer to the method used to scramble passwords while salting refers to making huge amounts of hashes harder to crack for attackers. Also keep in mind that certain hashing methods are considered easier to break than others. Insecure hashing algorithms include algorithms like MD5 and SHA1 because they can be easily compromised – hashing algorithms like BCrypt and Blowfish are significantly stronger. If you see that your password was hashed with a weak algorithm, consider that password and account compromised. If a stronger hashing method is in use, identity theft is less likely, but remains a possibility. Plain Text Passwords – change your password on that application immediately. If you don't, attackers are likely to steal your identity by combining your username/email address to access any data while impersonating you. IP Addresses – know that attackers are now aware of the general location you've used to register and/or use the service from. No need to panic, but you should consider using a VPN or a proxy to avoid disclosing your location next time. Phone Numbers – keep in mind that your phone number (and, likely, other associated information such as your email address, username, or even your name) may now be in the hands of cybercriminals. Be wary of the calls you may receive and double-check if they're coming from a trusted source before picking up. Other Data – trust your gut, keep yourself educated, listen to reputable advice, and act accordingly.

About the API

The API provided by BreachDirectory is suitable for personal, educational, as well as corporate use.

The API is used by numerous well-known companies and universities helping them secure their infrastructure, educate youth on cyber security issues, and provide assistance in preventing account takeover attacks.

Someone Has Your

Cross-Site Scripting (XSS)

What is a Data Breach ?

About the API

OSINT Offering

Enough Donations Could Make BreachDirectory Free