Email Breach Checker

An email breach checker takes the email address you enter and looks it up against the UK and global breach corpora that have been published in the last decade. The corpora are aggregated from leaked credential dumps that attackers post to dark-web forums and that researchers index. If your address shows up in any of those dumps, the checker tells you which breach, when it was published, and what was exposed (typically email plus password hash, sometimes plus address, phone, or partial card data).

The first thing to understand is that a positive breach result is not your fault. Almost every UK business email lands in a breach corpus eventually, because the breaches are on third-party services you used (LinkedIn, Adobe, Dropbox, Canva, MyFitnessPal). The checker is for working out what to do next: which passwords to rotate, which accounts to enable MFA on, which credentials are still in active use that should not be.

What this tool will not tell you is whether the breach has been actively exploited against you. That requires a separate assessment of your account activity, your authentication logs, and your sign-in history. If you find your address in a breach and you are uncertain whether your accounts have been compromised, that is the conversation to have with your IT team or with us.