We display where your address leaked and what went with it. We never store the address.
Latest observationJapan · KDDI 22K (possible leak)Read the report →
24h197 days 13530 days 202Largest possible leak recorded, 24h クラブツーリズム 4.32M
Kindly tap a country on the globe, or one below, to switch the view
Possible leak Under investigation
These figures derive from company disclosures and news reports. This observatory has not verified them against the leaked data itself, and they may change as investigations proceed.
| # | Organisation | Records | Date |
|---|---|---|---|
| 1 | ホワイトハッカーにいろいろ聞 | 300M | 10/30 |
| 2 | 個人情報漏えい、2.6億人分 | 260M | 10/30 |
| 3 | 楽天トラベル | 220M | 10/27 |
| 4 | 200M | 10/31 | |
| 5 | 佐川急便 | 53.2M | 10/23 |
| 6 | ユミルリンク | 51.6M | 10/26 |
| 7 | 27.3M | 10/30 | |
| 8 | 27.3M | 10/30 | |
| 9 | ソースネクスト | 22.5M | 10/16 |
| 10 | Oracle Health | 20M | 10/09 |
Breaches whose data has been obtained and verified by Have I Been Pwned. Many breaches, including most in Japan, are not listed. Please note that absence here does not mean no breach occurred.
| Organisation | Records | Date |
|---|---|---|
| 345K | 10/27 | |
| 70.4K | 10/20 | |
| 118K | 10/18 | |
| 560K | 10/14 | |
| 318K | 10/12 | |
| 436K | 10/09 | |
| 373K | 10/07 | |
| 275K | 10/07 | |
| 6.77M | 10/07 | |
| 424K | 09/30 |
131 breaches tallied by this observatory
Q.If one site leaks, can they get into everything else?
A.Use a different password everywhereSo one leak is less likely to unlock everything else. Remembering them all is a heavy load for the brain; a password manager can keep track of them.
Q.Once my password leaks, is it too late?
A.Add a phone check to your loginsEven with your password, it becomes much harder to get in without your phone or key. This is called two-factor authentication, or passkeys.
Q.Would I even know if my data was being sold?
A.Get told when your data turns upSome services alert you when your email or card number is being sold online.
Q.Can I tell if an email after a breach is real?
A.Stop fake emails and sites before you open themWe have observed that convincing scams follow every leak. Security software can warn you about many dangerous sites and links before they open.
Q.How fast would I notice my card being misused?
A.Turn on card and bank alertsGet a notification the moment your card is used. It's free in your bank's app.
Turn it on now in your card or bank app — it's free.
Q.Can someone on public Wi-Fi see my passwords?
A.An encrypted connection makes that much harder.On café, station and hotel Wi-Fi, others on the same network can sometimes see your traffic. A VPN keeps it encrypted whenever you're out.
Q.Can my information leak from paper and cards too?
A.Shred what you throw away, black out addresses, and shield your cards.Leaks aren't only online. Bills in the trash, mail and screens on crowded trains give away names and account numbers. Simple tools stop it.
No single measure fully prevents leaks or harm. But layering a few of them means that if a breach does happen, you already possess ways to limit the damage. We advise beginning with whatever can be done today.
Added to the CISA Known Exploited Vulnerabilities catalog in the last 30 days. Not counted as breaches.