How to check if your email was in a data breach
A breach lookup can show whether an address appears in datasets reported to the services you check. It cannot search every private database or prove that an account was accessed.
1. Check only an address you own or are allowed to assess
Use your own email address, or get permission from the person responsible for it. A lookup service needs the address or a derived identifier to perform the check. Never enter an email password into a breach checker.
2. Use a trusted breach source
Have I Been Pwned provides a free check against its breach index. LeakTrace also uses Have I Been Pwned and LeakCheck Public; the optional XposedOrNot API+ source is used only when enabled. A provider can be unavailable or return no matching records, so check the source coverage shown with your scan.
3. Read the result in context
A match is an association reported by an indexed source. Review the source name, reported date and data types when available. It does not prove that the account is currently compromised, that the named organisation still holds the address, or who sent unwanted messages. No matches means only that the sources that completed found no match; it is not proof that the address has never been exposed.
4. Protect the address and your accounts
Use a unique password for every account, enable multi-factor authentication where available, and review recovery settings and active sessions. Treat unexpected messages cautiously, especially if they refer to a service connected to the exposed address.
What LeakTrace adds
LeakTrace gives a free preview of the match count and reported source names. A paid report adds the available finding details and practical recommendations. Eligible subscription plans offer opt-in daily rechecks and alerts about new findings. The scan does not access your mailbox or guarantee complete coverage.