How breach alerts work

Breach alerts are the emails LeakedSource sends when a monitored identity shows up in newly indexed breach data.

How fresh is the data?

Our breach index is powered by HEROIC, whose database is updated continuously as new breaches are discovered, analyzed, and indexed. LeakedSource syncs against that index automatically every 6 hours, so alerts typically go out within hours of a new breach source being indexed.

When you'll get an alert

You receive an alert when a newly indexed breach contains one of your verified, actively monitored identities. You won't be re-alerted about breaches you were already told about — alerts are about new exposure.

What an alert contains

The alert names the breach source and summarizes the types of data exposed. It never includes the sensitive values themselves — you sign in to your account to review details securely.

When an alert arrives

1. Sign in and review which data types were exposed.
2. If a password was exposed, change it on the affected service and everywhere it was reused.
3. If the hit is a stealer log, scan your devices for malware before changing passwords — see Breaches vs. stealer logs.

Not receiving alerts?

Check that the identity is verified and toggled on under Monitoring, and add noreply@leakedsource.com to your contacts so alerts don't land in spam. Notification preferences live under Settings → Notifications.