Search
On This Page
More Guides
Spotting Phishing & Malware Router Security Basics Password Managers & 2FA Browser Fingerprinting Data Broker Opt-Outs Remove Your Info From Google Search How to Browse the Web Privately Lock Your Number Against SIM Swaps ← All Guides
Security

How to Check If Your Email Was in a Data Breach

Chances are your email address has already appeared in a data breach. That is not a reason to panic. It is a reason to know which accounts are affected and what to change.

Last updated October 14, 2026 · By Harbor Privacy

Check Your Email

Breach-checking services keep lists of email addresses found in leaked databases. Enter your address and it reports which breaches included it, usually with the date and the kind of data that leaked. Try each email address you use, including old ones.

Harbor offers a free Breach Monitor that checks your email daily and emails you if it appears in a new breach.

What the Result Means

  • Email only. Expect more spam and phishing. Little else to do.
  • Email and password. Change that password everywhere you used it, today.
  • Personal details. Names, addresses, phone numbers or ID numbers raise the risk of targeted phishing and identity theft. Consider a credit freeze.

What To Do If You Are In One

01
Change the passwordStart with the breached site, then any site where you reused it.
02
Use a different password for every accountA password manager makes this practical. See Passwords and 2FA.
03
Turn on two-factor authenticationUse an app or a security key where you can, not text messages.
04
Watch for phishingAttackers use breached details to make messages look real. See Phishing.

Reduce the Damage Next Time

  • Use a masked or alias email address for sign-ups, so a leak exposes the alias and not your real inbox
  • Delete accounts you no longer use. See Delete Old Accounts.
  • Do not reuse passwords

Related guides: What to do after a data breach, Email aliases explained.

Common Questions

Is it safe to type my email into a breach checker?
Reputable checkers only look the address up and do not store it. Never enter a password into one.
Why am I in a breach for a site I never used?
Some leaks come from companies that collect data in the background, such as data aggregators and marketing firms.
Does being in a breach mean I was hacked?
No. The company holding your data was breached. Your own device and account may be fine as long as the password is not reused.
How often should I check?
Occasionally, or set up monitoring that checks for you and alerts you.
GET ALERTED, FREE

Harbor Breach Monitor checks your email against known breaches daily and warns you if it shows up. Check my email.

Harbor Privacy
Cut Big Tech out of your home network.

Encrypted DNS and network-level blocking of trackers and ads on every device, set up in minutes. No technical skills required.

See plans →