DeepIntel breach hits with source labels.
A domain search shows which staff addresses appear in breach data. Run it on your own company domain to find accounts that need a reset before an attacker uses them.
Run the domain search
- Search your domain, for example company.com, in breach search
- Export the JSON so you can sort and share the result
- Repeat for every domain your company owns
breachtarget@example.comcombo_20242024-08
breachtarget@example.comforum_dump2023-11
Group the hits
- By source, to see which breaches touched your staff
- By address, to see who appears more than once
- By exposure type, to separate plain text passwords from hashes
Turn it into an action plan
- Force a password reset for every address with a plain text hit
- Turn on MFA for those accounts first
- Check whether the same password was used on company systems
- Tell the affected staff what happened and why
Only your own domains
Search domains that your company owns or that you are authorized to check. Do not use the result to contact or pressure staff.
Repeat on a schedule
New breaches are indexed over time. Run the same search every month and compare the exports to see what is new.
