NUOecurity
Threat Intel

Breach Exposure Check

Discover which known breach corpora contain a mailbox or domain.

Enable continuous monitoring All plugins
Breach Exposure Check
Email
Free
Found in 4 breaches
  • LinkedIn
    2021 · 700M records
    exposed
  • Adobe
    2019 · 153M records
    exposed
  • MyFitnessPal
    2018 · 150M records
    exposed
  • Dropbox
    2016 · 68M records
    exposed
How it worksMonitor continuously
Overview

What this plugin does

The Breach Exposure Check queries an indexed corpus of publicly disclosed data breaches to reveal which incidents contain a given email address or domain. Results include the breach name, year, exposed record count and the categories of data leaked.

1. Hash lookup

The address is SHA-256 hashed client-side; only the first 5 hex characters are sent, using k-anonymity like HIBP.

2. Corpus match

Matching hashes are compared server-side against 900+ indexed breach dumps.

3. Enrichment

Each hit is enriched with breach date, record count, and the classes of data exposed (passwords, PII, financial).

Signals we analyse

  • Breach name and disclosure date
  • Exposed record count
  • Classes of data leaked (passwords, PII, financial, health)
  • Whether plaintext or hashed credentials were exposed

Common use cases

  • Alert users whose credentials appeared in a new dump
  • Prioritise password resets for exposed accounts
  • Show risk to prospects during a sales cycle
Example output

What a full scan returns

This is what the paid, deep-scan version of the plugin produces — a full breakdown you can export as PDF or JSON.

nuosecurity ▸ scan ▸ breach-check
  • LinkedIn (2021)
    700M records · emails, hashed passwords
    fail
  • Adobe (2019)
    153M records · emails, password hints
    fail
  • MyFitnessPal (2018)
    150M records · emails, hashed passwords
    fail
  • Continuous monitoring
    not enabled
    warn

Frequently asked questions

Do you store the addresses I check?

No. Only the 5-character hash prefix is transmitted, and it is not logged with the response.

How fresh is the corpus?

New breach dumps are ingested within 24 hours of public disclosure.

Can I monitor a whole domain?

Yes — the paid tier alerts you whenever any mailbox on your domain appears in a new dump.

Keep exploring

Other free plugins

Domain Security Scan

One-click grade for SPF, DKIM, DMARC, MX and DNSSEC posture.

View plugin
Password Strength Meter

Estimate crack-time and audit password composition in real time.

View plugin
Phishing URL Scanner

AI-scored risk analysis for suspicious links, redirects and payloads.

View plugin

Ready for the full Breach Exposure Check?

Preview mode uses simulated data. Unlock live results, historical trends, exports and API access.

Enable continuous monitoring Start free trial