Example only. An address stolen by password-stealing malware. This is a test address, not a real person. You'll be able to check your own address after sign-up: join the waiting list.
1 known breach includes this address
Results for stealer-log@hibp-integration-tests.com. This is common, and there are clear steps to take. Start at the top.
What to do now
- A device you signed in on was infected. Your address appears in data stolen by password-stealing malware, which means a computer or phone you used was probably infected. Run a full antivirus scan on your devices first, then change your passwords from a clean device.
- Change the leaked passwords. Change your password on each site listed, starting with your email account, and anywhere else you used the same one. Then stop it happening again: a password manager gives every site its own password, so you only have to remember one. Turn on two-step verification for your email and bank. Set up a master password so this never happens again.
- Expect more convincing scam emails. Scammers use leaked details to make emails look real. Don't follow links in unexpected emails; go to the site yourself. Forward suspicious emails to report@phishing.gov.uk.
- Cut down what's out there. Our free data removal steps stop sales calls and take your address off public listings.
Where your details leaked
Stealer Logs, Jan 2025
2025-01-13 · 71,039,833 accounts · password-stealing malware
- Email addresses
- Passwords
What happened
In January 2025, stealer logs with 71M email addresses were added to HIBP. Consisting of email address, password and the website the credentials were entered against, this breach marks the launch of a new HIBP feature enabling the retrieval of the specific websites the logs were collected against. The incident also resulted in 106M more passwords being added to the Pwned Passwords service.
We haven't stored these results. Some breaches are marked sensitive by the source and are never shown through services like ours, so this list may not be complete. Breach data from Have I Been Pwned, used under the Creative Commons Attribution 4.0 licence.