BreachDirectorybreachdirectory.org
Free breach lookup by email, username, or phone that shows matching breaches and partial password hashes with source names.
emailusernamephonedetails
tools / haveibeenpwned
Have I Been Pwned
Troy Hunt's free breach-notification service. Lists which known data breaches and pastes include an email address or phone number, but does not show passwords.
freemiumapiweb
field note
Breach names and dates give you a timeline of which services the person used. An old breach (e.g. a 2012 forum) can lead to an early username.
used in playbooks
similar tools
CrossTracecrosstrace.io
One identifier in, one reconciled view out: runs an email, username, phone or domain across the OSINT APIs you hold keys for (OSI, Dehashed, Opsis) and merges results with per-source attribution.
emailusernamephonedomaindetails
DeHasheddehashed.com
Searchable breach database that queries by email, username, name, IP, phone, address, or password hash and returns raw leaked records.
emailusernamereal nameip / asnphonelocationdetails
Have I Been Zuckeredhaveibeenzuckered.com
Checks whether a phone number or email appears in the 2021 Facebook scrape of 533M users, which links numbers to Facebook IDs and names.
phoneemaildetails
Intelligence Xintelx.io
Search engine and archive of leaks, pastes, dark-web pages, and historical data. Supports email, domain, IP, CIDR, URL, and crypto address selectors.
emaildomainip / asnurlcryptophonedetails
Leak-Lookupleak-lookup.com
Breach data search engine with a free check of which breaches contain a selector, and paid access to the full records.
emailusernameip / asnphonedomaindetails