Leak-Lookup
Operator: Operator not identified
A data breach search service with a free preview, paid access to individual searches and a separate API.
Leaks, Breaches & Infostealers
Product
Leak-Lookup, a hosted data breach search service. Web credits and API contracts are separate offerings.
Availability and source date
Active
As of: 16 October 2026.
No functionality test has been performed.
Use in OSINT research
Shows which data breaches contain a known identifier. Full records are unlocked separately and must match the person being researched.
Queries
| Input | Result | Result type |
|---|---|---|
| Email address + Username / alias + IP address + Phone number + Domain / website + Person name | Names of data breaches with matching results. The free API hides the data fields they contain. | Retrieved |
| Email address + Username / alias + IP address + Phone number + Domain / website + Person name | Depending on access purchased, records from breaches, such as contact details, account names and compromised credentials. | Retrieved |
| Password (plaintext) | A documented API search type for data breach records matching a password; visible data fields depend on API access. | Retrieved |
Features
- Searches by email address, username, IP address, telephone number, domain or full name.
- Shows affected data breaches in the free preview.
- Unlocks the data fields found in a web search for one credit.
- Downloads search results; more than 2,000 web results require a manual export.
- Provides separate public and private JSON APIs.
Categories
- Leaks, Breaches & Infostealers
- Breach search
Coverage
Dataset
The provider states that it holds around 28.4 billion records from 4,766 data breaches (16 October 2026). It does not specify which countries are fully covered.
Access
Requirements
The API requires an account with an API key. Full web results require credits; the private API is offered to businesses on individual terms.
Export
Results through the download function; the FAQ does not specify a file format. The API returns JSON.
Provider
Unknown
Country of establishment
Unknown
Interfaces
API
Available. Public API: 10 requests per day with redacted results. Private API for businesses: full records, with price and daily limit agreed individually. Up to 10,000 results, 5 requests per minute.
MCP
Not documented. The product page and API documentation do not describe a dedicated MCP or AI agent integration.
AI agents
Not documented. The product page and API documentation do not describe a dedicated MCP or AI agent integration.
Usage note
The terms allow searches only for your own data or with the written consent of the person concerned.
Legal note
Limitations
- The provider states in its terms that it does not verify the accuracy of imported data.
- Free results contain limited information; the web search and API have different limits.
- The terms restrict searches to your own data or people who have given written authorisation.
Guides and practical reports
Official · Leak-Lookup: search API and result types
Leak-Lookup · EN
Explains search fields, redacted and full responses, and limits.