Breach pages
Recent data breaches: what happened and how to check
Each page covers one incident: what is known, what data was involved, what to do next, and how to check whether your email already shows up in other breach or stealer log records. We do not claim to hold the datasets themselves unless a page says so.
Gnosis Pay
Was I in the Gnosis Pay breach? How to check
Gnosis Pay said on November 6, 2026 that unauthorized access hit the legacy system behind its own branded consumer cards. Funds were not affected, partner and white-label systems were not hit, and each affected customer was emailed with their specific fields. Here is what is known, what to do now, and how to check.
Read the pageRyohin Keikaku (MUJI) · Up to about 27.26 million records
Was I in the MUJI app breach? How to check
MUJI's operator now says the breach reached about 1.09 million MUJI Card numbers plus names and addresses for about 520,000 people, on top of up to 27.26 million app and online store records. Here is what is known, what to do now, and how to check.
Read the pageMarathon Health · About 5.68 million people
Was I in the Marathon Health breach? How to check
Marathon Health says a breach in August 2026 exposed Social Security numbers and medical info for about 5.68 million people. Here is what was taken, what to do now, and how to check.
Read the pageFlorida Department of Education · About 4.9 million people
Was I in the Florida Student Financial Aid breach? How to check
Florida's Department of Education says a breach of its Student Financial Aid website may have exposed Social Security numbers and contact details for about 4.9 million people. Here is what was taken, what to do now, and how to check.
Read the pageCapcom · About 11.7 million CAPCOM ID records
Was I in the Capcom breach? How to check
Capcom says 11.7 million CAPCOM ID email records were exposed in October 2026. Here is what was taken, what was not, and how to check if your email is out there.
Read the pageLoblaw · About 2 million Canadians
Was I in the Loblaw data breach? How to check
Loblaw is emailing about 2 million Canadians hit by its 2026 data breach. Here is what was exposed, what to do now, and how to check your email.
Read the pageFrontline Education · About 1.3 million people (filings so far)
Was I in the Frontline Education breach? How to check
Frontline Education says a August 2026 incident hit school district staff and students. Filings add up to about 1.3 million people, with Social Security numbers among the data that may have been exposed.
Read the pageHarvard University · About 851,000 unique emails in HIBP
Was I in the Harvard breach? How to check
Harvard's Alumni Affairs and Development systems were accessed in November 2025. Have I Been Pwned later loaded about 851,000 unique email addresses from the leaked archive.
Read the pageArchive of Our Own / OTW · Unconfirmed; site offline after security incident
Was I in the AO3 breach? How to check
Archive of Our Own went offline after a security incident in late October 2026. OTW says it does not currently believe the user database was stolen, but it cannot rule that out yet.
Read the pageQuest Diagnostics · Count not disclosed yet
Was I in the Quest Diagnostics breach? How to check
Quest Diagnostics says patient records were likely accessed through its Quanum Lab Services Manager portal in October 2026. Here is what is known and what to do.
Read the pageScribd, Inc. · Count not disclosed
Was I in the Scribd breach? How to check (Scribd, Slideshare, Everand, Fable)
Scribd, Inc. says an unauthorized party accessed user information across Scribd, Slideshare, Everand and Fable. Notices are going out by email. No full count has been published.
Read the pageAmadeus (airline booking systems) · Multiple airlines; counts still growing
Was I in the Amadeus airline breach? How to check (JAL, ANA, Cathay Pacific and more)
A breach at airline booking provider Amadeus exposed reservation data for Japan Airlines, ANA, Cathay Pacific, Korean Air and other carriers. Here is what was taken, what to do now, and how to check.
Read the pageStart here
Check your email against known leaks
One free lookup shows which records we can source for an email address, with one of them revealed in full and every row labelled with its source.
Run an email lookup