Example only. An address caught in several breaches. This is a test address, not a real person. You'll be able to check your own address after sign-up: join the waiting list.
3 known breaches include this address
Results for multiple-breaches@hibp-integration-tests.com. This is common, and there are clear steps to take. Start at the top.
What to do now
- Change the leaked passwords. Change your password on each site listed, starting with your email account, and anywhere else you used the same one. Then stop it happening again: a password manager gives every site its own password, so you only have to remember one. Turn on two-step verification for your email and bank. Set up a master password so this never happens again.
- Expect scam calls and texts. Your number is in circulation. Be wary of texts about parcels, HMRC refunds or a new "Hi Mum" number, and of callers claiming to be your bank. Forward scam texts to 7726 (free). If a caller says they're your bank, hang up and ring 159.
- Watch for someone using your identity. Name, address and date of birth are enough to apply for credit in your name. Check your credit report for accounts you don't recognise (the statutory report is free from each agency). If you find one, report it to that lender and to Report Fraud (formerly Action Fraud).
- Check your bank and card statements. Look through recent statements for payments you don't recognise and tell your bank straight away if you find any. Ring 159 to reach your bank safely.
- Expect more convincing scam emails. Scammers use leaked details to make emails look real. Don't follow links in unexpected emails; go to the site yourself. Forward suspicious emails to report@phishing.gov.uk.
- Cut down what's out there. Our free data removal steps stop sales calls and take your address off public listings.
Where your details leaked
Adobe
2013-10-04 · 152,445,165 accounts
- Email addresses
- Password hints
- Passwords
- Usernames
What happened
In October 2013, 153 million Adobe accounts were breached with each containing an internal ID, username, email, encrypted password and a password hint in plain text. The password cryptography was poorly done and many were quickly resolved back to plain text. The unencrypted hints also disclosed much about the passwords adding further to the risk that hundreds of millions of Adobe customers already faced.
Stratfor
2011-12-24 · 859,777 accounts
- Credit cards
- Email addresses
- Names
- Passwords
- Phone numbers
- Physical addresses
- Usernames
What happened
In December 2011, "Anonymous" attacked the global intelligence company known as "Stratfor" and consequently disclosed a veritable treasure trove of data including hundreds of gigabytes of email and tens of thousands of credit card details which were promptly used by the attackers to make charitable donations (among other uses). The breach also included 860,000 user accounts complete with email address, time zone, some internal system data and MD5 hashed passwords with no salt.
Gawker
2010-12-11 · 1,247,574 accounts
- Email addresses
- Passwords
- Usernames
What happened
In December 2010, Gawker was attacked by the hacker collective "Gnosis" in retaliation for what was reported to be a feud between Gawker and 4Chan. Information about Gawkers 1.3M users was published along with the data from Gawker's other web presences including Gizmodo and Lifehacker. Due to the prevalence of password reuse, many victims of the breach then had their Twitter accounts compromised to send Acai berry spam.
We haven't stored these results. Some breaches are marked sensitive by the source and are never shown through services like ours, so this list may not be complete. Breach data from Have I Been Pwned, used under the Creative Commons Attribution 4.0 licence.