Have I been affected by a data breach?

Start with a notice addressed to you

A notice from an organization can explain whether its investigation determined that your information was involved. Read it for the organization name, incident dates, information categories, offered assistance, and any deadlines.

Before following links or calling a number in the message, verify the notice independently through the organization’s official website or a contact channel you already trust.

Compare public breach records

Use our recent breach records and breach news to understand the incident context. Compare the dates, organization, domain, and reported information categories with your notice.

A public catalogue entry is an incident-level record. It can help explain what was reported, but it does not establish that every customer—or every listed data category—was affected.

Verify information with the company

Look for a security, privacy, or incident notice on the organization’s official website. If the notice is unclear, ask the organization what it determined about your record and what protections it recommends.

Be alert for breach-themed phishing. Attackers may imitate a real organization or refer to a real incident to make a message look convincing.

No public record does not mean no exposure

Public catalogues do not contain every incident, and news reporting may appear before a structured record is available. A missing public record should not override a verified notice addressed to you.

Likewise, a public record by itself does not prove identity theft, financial loss, legal eligibility, or a right to compensation.

Choose your next step

Take protections that match the information identified in your notice. Keep the notice and relevant records. If you want to discuss potential legal options, you can send the organization and notice details through our contact form.