Skip to content
Network USA

Guide ยท Consumers

How can you check if your data was in a breach?

The most reliable sign that your data was in a breach is a notice from the organisation that held it, because state laws require such notice. For health data you can also search breach reports filed with HHS, and for email addresses there are independent public checkers.

Breach notice letters

Organisations covered by state breach laws must notify affected residents. Keep any notice and verify it through the organisation's official website.

Health data breaches

Search our HIPAA breach tracker (8,024 reports) by provider, health plan or business associate name, or the official HHS OCR breach portal. These list breaches affecting 500 or more people, not individual names.

Email and password breaches

Have I Been Pwned is an independent external service that lets you check an email address against known breaches. We do not endorse any product or service.

Your rights if your data was breached

Rights depend on your state law and the type of data. See your state law page and what to do after a data breach notice.

Frequently asked questions

How do I know if my data was breached?

Usually from a breach notice sent by the organisation. You can also search the HHS OCR breach portal or our HIPAA tracker for health breaches, and check an email address with an independent service such as Have I Been Pwned.

Can I check if my data has been breached?

Partly. Breach lists show which organisations reported breaches, not whose data was involved. The organisation's notice is the definitive source.

What are my rights if my data has been breached?

They depend on your state's breach law and the data involved; some states require credit monitoring offers or allow private lawsuits. See your state law page.

Sources

Last updated 2026-10-20.