Understanding your scan results

A scan result has three layers: how many breaches you appear in, which breaches they are, and what data each one exposed.

The breach count

This is the number of distinct breach sources containing your email (and, for homepage scans, your network address). A high count isn't necessarily catastrophic — an old email address can accumulate breaches over decades — but each entry deserves a look.

Breach sources

Each named source is a specific incident: a company database that was compromised, a scraped dataset, a credential dump, or a stealer log collection. Clicking into a breach shows when it occurred, roughly how many records it contained, and a description of what happened. You can also browse our full Breach Database.

Exposed data types

The most important layer. For each breach we list what categories of data were exposed: email addresses, passwords, phone numbers, physical addresses, IP addresses, dates of birth, and so on.

• Password exposed → change that password now, everywhere you used it.
• Phone/address exposed → be alert for phishing calls and targeted scams.
• Financial or government ID exposed → monitor your credit and consider a freeze.

Free vs. Pro results

Free accounts see which breaches you're in and what data types were exposed, with sensitive values masked. Pro accounts see the actual compromised values — useful for confirming exactly which password leaked. See Why is my data masked? for details.