Researcher Access Only
Search breach data for security research.
Filter public and private leak sources by incident type, authenticity, date, and exposed field, then search the records.
Incident responseThreat intelligenceTrust & safety
Approved accounts can unlock 25,000 breach records per month by default. API and MCP access are included.
Sponsored by
Index Preview
Recently indexed leak sources
Indexed records
20.1B+
Leak sources tracked
775
Exact Sciences
Breached Jul 2026
1.5M+ records
Likely authentic
Index Coverage
See what the index covers
0+
Indexed Records
0
Tracked Leak Sources
Recent Sources
Explore recently indexed leak sources
Compare each source's category, authenticity, date, record count, and searchable fields. Only directly reviewed provenance is marked verified.
Research Workflow
Filter, search, and investigate
Filter leak sources, search exposed fields, and move from exposure checks to response.
Leak-Source Filters
Combine category, authenticity, visibility, date, record-count, and exposed-field filters.
Reviewed Source Metadata
Each source has categories and an authenticity status. Only reviewed provenance is marked verified.
Exposed-Field Search
Search emails, usernames, phone numbers, IP addresses, names, password hashes, and other exposed fields.
Investigation Workflow
Search, triage, report, and follow up in one place.
Reviewed Access
We review account requests for legitimate security research and incident response.
REST API and MCP
Connect internal tools through the REST API or MCP server.
Research Stack
Run breach checks from your existing tools
Use one approved account across the web app, REST API, and MCP server.
MCP Clients
Search breach data from Codex, Claude, Cursor, and other MCP clients with an API token.
Documented REST API
Use the OpenAPI reference for authentication, search requests, pagination, and response schemas.
FAQ
Questions researchers usually ask first
Researcher Access
Request researcher access
Approved accounts can unlock 25,000 breach records per month by default through the web app, REST API, or MCP server.