Privacy Unpacked
Menu

Private by design

Is this breach letter real?

Paste a data breach letter, email or text message. We tell you which breach it is about, what the official notice says, and what in it looks like a scam. It is checked in your browser and never sent anywhere.

On paper? Your phone can copy the text from a photo: on an iPhone, Live Text in the Camera or Photos app; on Android, Google Lens. Copying an email loses where its links really go, so never trust a link because its text looks right.

Whatever the result

  • Do not use the links or phone numbers in the letter. Type the company’s own web address yourself, or use the contacts in the official notice.
  • Credit monitoring: enrol only on the monitoring company’s own website (Experian, TransUnion, Equifax, IDX, Kroll…), with the code from your letter. It is free: a real offer never asks for a card.
  • Never pay to get monitoring, a refund or a settlement payment, and never send a password, a PIN or a card number back.
  • Freezing your credit protects you whether the letter is real or not. See the tracker’s guides for what to do after each kind of breach.
How this stays private

This page downloads the list of breaches (the same file for every visitor) and does all the checking in your browser. What you paste is not stored, not even on this device, and is never sent to us or anyone else. The page loads no analytics and no ads. The checks are simple rules, not a judgement on the letter: a careful scam can copy a real letter word for word, and a real letter can trip a warning.

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Found a mistake? Tell us and we correct it.