A breach result means a company you used lost data that included your email address, and sometimes your phone number or password too. You can’t undo a breach, but you can make sure what was lost can’t be used against you. Your report shows which breaches and what each one exposed.
What to do
- Change any password that was exposed, and anywhere else you used the same one. Your report says whether passwords were in the breach.
- Turn on two-step sign-in for your email first, then for any account you care about.
- Use a password manager, so each site has its own password.
- Expect targeted messages. If your phone or address was exposed, be wary of texts and emails that know your name or mention the company that was breached.
Why breaches matter for exposure
Breached data is often combined with people-search listings. An old email from a breach can link your name to a username, and that username to a profile with your city. Your report shows where a breach is part of a route to you.
What we don’t do
We don’t show the passwords or other values from a breach, only what kinds of data were exposed. We check breaches against your confirmed email addresses. Phone numbers aren’t checked on their own, but a breach found by email can show that your phone number was exposed too.