How do I check if my company was in a data breach?

Enter the company’s email domain in a domain breach check. It counts the breach records for every address at the domain and the staff logins captured on infected devices, and names the source and date of the first few.

Does a domain check show the leaked passwords?

Not on the free check: values are blacked out and only the first three matches of each kind are shown. An account shows every match, and the pricing page sets out which plans show the values.

How do I get alerts when my domain appears in a new breach?

Set up a monitor on the domain. It watches every address at the domain and emails you when one appears in a new breach record or stealer log.

Is the domain breach check free?

Yes, with no account and no card. You get five checks a day, and each one shows up to three matches of each kind with the sensitive values blacked out. A free account shows every match and can watch the identifier for new ones.

Domain breach check, free.

Enter a company domain to count the breach records for its email addresses and the logins with them captured on infected devices.

Sensitive values censored
No account needed

Breach records

Which breaches hold it, and what leaked with it.
Infected devices

Logins stolen by information-stealing malware.

The check is the preview.
The account is the record.

Create free account Free forever, no card

Included	Free check	Free account
Searches	A few a day	10 searches a day, plus 10 people searches
Breach records	First 3, values blacked out	Every match, plus 2 credential unlocks a week
Infected-device records	First 3, passwords blacked out	Every match and its files, masked
US public records	Cities, area codes and initials	Every match by name, age and city; full profiles from Basic
Monitoring	Not included	Email alerts on new matches

What a domain check searches

Every email address at the domain at once. Breach records come back as a count of matches and of the breached services they came from, with the first three named and dated. Device records come back as a count of logins made with an address at the domain and captured on an infected computer, with the site each login was for, the country of the machine and the date the log was collected.

Why company logins end up in stealer logs

Most of them come from computers the company never managed: a family laptop used to check work email, a contractor’s own machine, a personal browser profile that synced a work password. Verizon’s 2025 Data Breach Investigations Report found that 46% of the systems whose stolen logs held corporate logins were unmanaged devices holding personal and work credentials together.

A breach row is a smaller problem: a work address used to sign up for a service that later lost its data. It matters when the same password was reused on something of the company’s.

What to do with a hit

Rank device records first, and the ones for your own sign-in pages, VPN and admin panels above the rest. Revoke the person’s sessions before resetting the password, reset it from a clean device, and require a second factor on whatever the login reached. How to check if your information has been leaked covers the difference between the two kinds of record in more detail.

Keep watching the domain

A check is a snapshot of what has been posted so far, and new logs arrive every day. A monitor watches a whole domain and emails you when it next appears in a breach or a log. The number of monitors on each plan is on the pricing page.

Questions.

How do I check if my company was in a data breach?: Enter the company’s email domain in a domain breach check. It counts the breach records for every address at the domain and the staff logins captured on infected devices, and names the source and date of the first few.
Does a domain check show the leaked passwords?: Not on the free check: values are blacked out and only the first three matches of each kind are shown. An account shows every match, and the pricing page sets out which plans show the values.
How do I get alerts when my domain appears in a new breach?: Set up a monitor on the domain. It watches every address at the domain and emails you when one appears in a new breach record or stealer log.
Is the domain breach check free?: Yes, with no account and no card. You get five checks a day, and each one shows up to three matches of each kind with the sensitive values blacked out. A free account shows every match and can watch the identifier for new ones.