When your data gets leaked.

One of the best sources for actual consumer notification letters — searchable and downloadable as CSV. Letters often identify dates of access, information exposed, discovery date, vendor relationships, and credit-monitoring relief.

Recent notices with affected-resident counts, incident dates, and information compromised.

Downloadable reports covering breaches reported to Massachusetts.

Particularly valuable because it frequently publishes the complete notification letter.

Healthcare breaches affecting 500 or more individuals — entity, state, breach type, individuals affected, and business associates.

Broad, frequently updated database compiled from government notices, company reports, and news sources.

Historical research and breach chronology going back over a decade.

Determines whether a particular email address or domain appears in known breached datasets.

Live, searchable ransomware intelligence with RSS feed, statistics, and API. Tracks ransomware-group postings (allegations until independently confirmed).

Aggregates ransomware victim claims and group activity.

Accessible cybersecurity reporting focused on significant incidents.

Frequently reports ransomware attacks, vendor compromises, and newly issued breach notices.

Specialized reporting on healthcare, education, government, and commercial breaches.

Search public-company filings for "Item 1.05", "cybersecurity incident", "data exfiltration", "ransomware", and "unauthorized access".

Complaints, settlements, enforcement orders, and alleged security failures.

Useful for multistate settlements, investigations, and notices that may not appear in national databases.

Does not primarily catalog consumer breaches, but can identify the vulnerability or threat actor connected to an incident.

Search federal dockets, complaints, opinions, and documents contributed through RECAP. Try "data breach", "security incident", "unauthorized access", and the company name.

Free opinions involving data-breach standing, negligence, contract, privacy, and statutory claims.

Useful for locating recently filed data-breach class actions, although document coverage is limited.

Federal materials, congressional reports, hearings, regulations, and published court opinions.

Most reputable first stop. Email yes, phone generally no. Identifies known breaches and exposed data categories.

Accepts phone numbers in international format, such as +12155551212.

Searches by email, phone, username, domain, or hash; detailed results require payment.

Provides breach monitoring and recommended corrective steps.

Checks email addresses against breach and infostealer datasets.

More powerful investigative database; useful for authorized professional research.

Searches email addresses and usernames, but provides less context than HIBP.

Best for checking whether employee credentials associated with a business domain were exposed.