Breached Email Check

Data & APIs

Check if an email has appeared in known data breaches and get detailed breach history, severity, compromised data, and remediation recommendations.

Install

openclaw skills install toolweb-breached-email-check

Breached Email Check

Check whether an email address has appeared in known data breaches. Submit any email address and get back a breach history report — including which breaches exposed the address, what data types were compromised, breach dates, and remediation recommendations. Essential for user onboarding security checks, employee credential monitoring, and threat exposure assessments.


Usage

{
  "tool": "breached_email_check",
  "input": {
    "email": "user@example.com"
  }
}

Parameters

FieldTypeRequiredDescription
emailstringThe email address to check against known data breach databases

What You Get

  • Breach status — whether the email has been found in any known breaches
  • Breach list — names of breaches the email appeared in, with dates
  • Compromised data types — what was exposed per breach (passwords, phone numbers, physical addresses, credit cards, etc.)
  • Breach severity rating — overall risk level based on sensitivity of exposed data
  • Paste exposure — whether the email has appeared in public paste sites (Pastebin, etc.)
  • Remediation guidance — specific actions to take based on breach findings (password reset, MFA, account monitoring)

Example Output

{
  "email": "user@example.com",
  "breached": true,
  "breach_count": 3,
  "severity": "High",
  "breaches": [
    {
      "name": "LinkedIn (2012)",
      "date": "2012-06-05",
      "compromised_data": ["Email Addresses", "Passwords"],
      "description": "Password hashes exposed in large-scale breach; later cracked and published",
      "verified": true
    },
    {
      "name": "Adobe (2013)",
      "date": "2013-10-04",
      "compromised_data": ["Email Addresses", "Password Hints", "Passwords", "Usernames"],
      "description": "Source code and encrypted credentials exposed for 153 million accounts",
      "verified": true
    },
    {
      "name": "DataBreach.com (2020)",
      "date": "2020-03-21",
      "compromised_data": ["Email Addresses", "Phone Numbers", "Physical Addresses"],
      "description": "Aggregated breach data compilation including PII from multiple sources",
      "verified": false
    }
  ],
  "paste_exposure": true,
  "paste_count": 1,
  "remediation": [
    "Change passwords on all accounts using this email address immediately",
    "Enable multi-factor authentication (MFA) on all associated accounts",
    "Check for unauthorized account activity on LinkedIn and Adobe",
    "Consider using a unique email alias for sensitive accounts going forward",
    "Monitor credit report if physical address was exposed"
  ]
}

When email is clean

{
  "email": "safe@example.com",
  "breached": false,
  "breach_count": 0,
  "severity": "None",
  "breaches": [],
  "paste_exposure": false,
  "paste_count": 0,
  "remediation": [
    "No known breaches found — continue using strong, unique passwords",
    "Enable MFA as a proactive measure"
  ]
}

Use Cases

  • User onboarding — check if a new user's email is in known breaches at signup
  • Employee security audits — identify staff with exposed credentials before they become an attack vector
  • Threat exposure assessment — assess corporate email domain exposure across your workforce
  • Password reset triggers — automatically prompt users with breached emails to reset credentials
  • Security awareness — show users their personal breach history to drive MFA adoption

API Reference

Base URL: https://portal.toolweb.in/apis/security/breached-email-check

EndpointMethodDescription
/check-breachPOSTCheck an email address against known data breach databases

Authentication: Pass your API key as X-API-Key header or mcp_api_key argument via MCP.


Pricing

PlanDaily LimitMonthly LimitPrice
Free5 / day50 / month$0
Developer20 / day500 / month$39
Professional200 / day5,000 / month$99
Enterprise100,000 / day1,000,000 / month$299

About

ToolWeb.in — 200+ security APIs, CISSP & CISM certified, built for enterprise security practitioners.

Platforms: Pay-per-run · API Gateway · MCP Server · OpenClaw · RapidAPI · YouTube