X-RAY // REP // HIBP

DATA BREACHES
CHECK.

See whether data breaches of the site are recorded on Have I Been Pwned, with the date, the number of accounts and the kinds of data exposed.

Runs only this check. For all 33 checks at once, use the full Domain X-Ray. Public lookups only; nothing is stored on the server.

HIBP

Data breaches

WAITING

Enter a domain above to run this check.

01 // WHAT THE CHECK VERIFIES

What the check verifies

Queries Have I Been Pwned for data breaches recorded for the domain.

02 // WHY IT MATTERS

Why it matters

If the site has leaked user data, the passwords of that time may be tried on other services (credential stuffing).

03 // HOW TO READ THE RESULT

What each result means

OK: No breach recorded on Have I Been Pwned for the domain.
WARNING: There are breaches recorded for the domain; the check lists the most recent ones.
NOT TESTED: The Have I Been Pwned query limit was reached; try again in a moment.

ERROR and TIMEOUT mean the query did not finish (the source was down or slow), not a problem with the domain: run the check again.

04 // HOW TO FIX

How to fix

The check shows breaches of the site itself, not addresses of your domain in breaches of other services (that search exists on Have I Been Pwned and requires proving that the domain is yours). If there was a breach, make sure the passwords of that time were changed; if it is recent and involves personal data, check your notification duties, such as the 72 hours of the GDPR or article 48 of Brazil's LGPD.

Would rather have someone else do it? Bit Happens can fix this →

05 // CONTINUE

More checks in Registration and reputation

Full Domain X-Ray: all 33 DNS, email, HTTPS, certificate and reputation checks at once →