How to Check If Your Personal Data Was Leaked in a Breach

Why This Matters Right Now

April 2026 has already been brutal for data security, and we're only a few days in. In the past two weeks:

• Cisco/Salesforce breach: Over 3 million records leaked from a misconfigured cloud integration — full names, business emails, phone numbers, and internal account identifiers. The data showed up on a known breach forum and was freely downloadable.
• Marquis Financial Group breach: 672,000 people affected, with Social Security numbers, bank account details, and credit card numbers confirmed exposed. Notifications started going out in late March 2026.
• Lloyds Banking Group app glitch: A technical error exposed the account details of roughly 450,000 customers through the mobile app, including balances and transaction histories visible to other logged-in users before the issue was patched.

These aren't hypothetical scenarios. They're happening right now, to real people, at companies people trust. And most people who got hit won't find out until weeks or months later — if they check at all.

What Actually Gets Leaked in a Data Breach

Not all breaches are the same. What gets exposed depends on what the company was storing and how the breach happened. Here's what shows up most often:

Credentials

Email addresses and passwords are the most common leak. Sometimes passwords are hashed (scrambled), sometimes they're in plain text. If they're hashed with a weak algorithm, attackers can crack them in hours. If they're plain text, the damage is immediate.

Personal identity data

Full names, dates of birth, phone numbers, home addresses. These get used for identity theft, SIM swapping, and social engineering attacks. The Marquis breach is a textbook example — SSNs paired with banking details give attackers everything they need to open fraudulent accounts.

Financial information

Credit card numbers, bank account details, transaction histories. When this leaks, the risk isn't just future fraud — it's fraud happening within days, because stolen financial data gets bought and used fast.

Behavioral and account data

Login timestamps, IP addresses, device information, purchase histories, internal identifiers. This stuff gets underestimated, but it's valuable for targeted phishing. When an attacker knows your account history and recent purchases, their phishing emails look a lot more convincing.

How to Check If Your Data Was Leaked

There are several reliable ways to check. None require technical skills, and the most important one takes about 30 seconds.

1. Have I Been Pwned

This is the gold standard. Created by security researcher Troy Hunt, Have I Been Pwned (haveibeenpwned.com) aggregates data from known breaches and lets you search by email address. As of April 2026, it indexes over 14 billion breached accounts across nearly 800 breach incidents.

Enter your email, and you'll see a list of every breach it appeared in — including what data was exposed, when the breach happened, and when it was added to the database. You can also subscribe to get email alerts for future breaches.

2. Your email provider's built-in alerts

Google, Apple, and Mozilla all have breach monitoring baked in. Google's Password Checkup (inside Chrome or your Google Account security settings) scans your saved passwords against known breaches. Apple's iCloud Keychain does the same on iPhone, iPad, and Mac. Firefox Monitor ties directly into the Have I Been Pwned database.

3. Your password manager

Most modern password managers — 1Password, Bitwarden, Dashlane — include a breach monitoring feature. They'll flag any saved credentials that appear in known breach databases. If you're using a password manager (and you should be), check its security dashboard.

4. Credit monitoring and dark web scans

For financial data exposure, services like Credit Karma, Experian, and Identity Guard offer monitoring that tracks whether your SSN, credit card numbers, or banking details appear in breach dumps or dark web marketplaces. Some banks also offer this for free through their apps.

What to Do If You Find a Match

Finding your data in a breach is unsettling, but the response matters more than the discovery. Here's the priority order:

The biggest mistake after a breach is doing nothing. The second biggest is changing one password and assuming you're safe. If you reused that password anywhere — email, banking, social media — every one of those accounts is now at risk.

Real Scenarios People Deal With

Data breaches aren't abstract security events. They create real problems for real people, often in ways that don't become obvious until weeks later.

You get a breach notification email but ignore it

Most breach notifications are dry, legalistic, and easy to mistake for spam. But ignoring them is exactly what attackers count on. If you got a notification from Marquis Financial, Cisco, Lloyds, or any other company in the last few months, take it seriously. Check what was exposed and follow the response steps above.

You reused a password and forgot where

This is the most common scenario. Your email and password leak from one service, and within hours, automated tools are testing that same combination against Gmail, Amazon, PayPal, and hundreds of other services. This is called credential stuffing, and it works because people reuse passwords across an average of 5–7 accounts.

You start getting hyper-targeted phishing emails

After a breach that included personal details — your name, purchase history, account information — phishing emails get way more convincing. Instead of generic "verify your account" messages, you get emails that reference your real order history or account activity. Behavioral data from breaches makes social engineering attacks significantly more effective.

Your information shows up in a future breach

Breached data doesn't expire. Records from a 2023 breach are still being sold, recombined with newer data, and used in 2026. That's why a single breach check isn't enough — you need ongoing monitoring, not a one-time look.

How to Protect Yourself Going Forward

1. Use unique passwords for every account. A password manager makes this easy. If every account has a different password, a breach at one service stays contained to that service.
2. Turn on two-factor authentication (2FA) everywhere. Prioritize email, banking, and social media. Use an authenticator app (Google Authenticator, Authy) rather than SMS when possible — SMS is vulnerable to SIM swapping.
3. Set up ongoing breach monitoring. Subscribe to Have I Been Pwned alerts. Turn on your password manager's breach scanner. Enable your bank's transaction alerts. Monitoring should be continuous, not something you do once and forget.
4. Encrypt your traffic with a VPN on public and untrusted networks. A VPN won't undo a breach that already happened — it can't protect data sitting on someone else's server. But it does encrypt everything leaving your device, which means login credentials, personal data, and browsing activity can't be intercepted while in transit. This matters especially on public Wi-Fi, where unencrypted traffic is an easy target. Free VPN US handles this with a single tap — connect and your traffic is encrypted before it reaches the network.
5. Freeze your credit if sensitive data was exposed. A credit freeze prevents new accounts from being opened in your name. It's free, takes about 10 minutes per bureau, and is the single most effective step against identity theft after an SSN leak.

None of these steps are complicated. The point isn't to become a security expert — it's to close the gaps that attackers rely on. Strong unique passwords stop credential stuffing. 2FA blocks unauthorized logins even if a password leaks. Encrypted browsing through a VPN stops credential interception on the network. Together, they form a practical protection stack that covers the most common attack paths.

Related Reads

Your ISP Sees Everything You Browse — Here's Why It Matters

Breaches expose stored data. Your ISP exposes data in real time. Learn what your provider actually sees and how to stop it.

Is Public Wi-Fi Safe? What You Should Know in 2026

Public networks are where credential interception happens most. Here's how to protect your data when you're away from home.