Known data breaches

Which sites appear in public data-breach records, and how many accounts were exposed.

How it’s collected

Matched against the public Have I Been Pwned breach index by domain.

Known limits

• Only breaches indexed by HIBP are covered; absence is not proof a site was never breached.

See it in use: Safety. Download: open data. Found an error? How we handle corrections.

Every figure in this dataset is drawn from the source above and dated. This is measured, first-party data — where a number is an estimate it is labelled as one. This site is in development.