MyRecon Site Directory & Knowledge Index
Direct navigation index across all 246 public tools, breach investigations, threat intelligence analyses, and privacy defense guides published on MyRecon.
Core OSINT Intelligence & Audit Tools (39)
Zero-install browser tools for username sweeps, breach detection, password audits, and digital footprint analysis.
- About MyRecon: Open-Source OSINT & Username Search
Learn how MyRecon checks public usernames, breach exposure, domains and IPs. Review source verification, unknown outcomes, privacy...
- Aryan Walia: Penetration Tester, Founder of MyRecon
Aryan Walia is a penetration tester and founder of BugSnaps and MyRecon. How offensive security work led to building an OSINT plat...
- Boost OSINT Investigations & Username Speed
Boost your OSINT investigations with MyRecon. Run parallel username sweeps across 500+ platforms, check email breaches, and verify...
- Browser OSINT Tool & Web Username Scanner
Run OSINT investigations directly in your web browser with zero CLI setup. Search usernames across 500+ platforms, check data brea...
- Build a social media research workflow
Separate public-profile discovery, mentions and media verification while retaining the original source and access context....
- Check an Instagram username
Use an exact handle and the official Instagram destination while keeping unavailable profiles and account ownership unresolved....
- Choose an OSINT tool for the question
A four-step guide to choosing public-source research tools, checking sources and keeping uncertain results separate....
- Compare three username research workflows
Compare documented setup and reporting choices while using the same known handles and preserving ambiguous outcomes....
- Contact MyRecon: Support, Removals and Disclosure
Reach MyRecon about a personal footprint report, a removal enquiry, a privacy request or a security disclosure. Every message reac...
- Cookie Policy: What Is Stored and By Whom
MyRecon’s own code sets no cookies. This policy lists every cookie and browser storage key used on the site, who sets it, what it ...
- Deep Search: Public Activity & Name Research
Investigate public sources with MyRecon Deep Search. Preview as a guest; eligible paid accounts can view supported findings, activ...
- Digital Footprint Checker by Email & Username
Check public username profiles and email breach exposure. Learn what each result means and follow practical steps to reduce your d...
- Digital Footprint Goal & Privacy Audit Roadmap
Achieve your digital privacy and zero-exposure footprint goals with MyRecon. Audit public usernames across 500+ platforms, check e...
- Embeddable Security Badges & Breach Widgets
Generate free embeddable security badges, GitHub README shields, and live data breach widgets for your repository, portfolio, or b...
- Evaluate a username search tool
A known-account exercise for comparing username checkers without confusing profile presence with identity or name availability....
- Free Data Breach API: JSON Feed, No Key
A free, keyless JSON API of data breach metadata for your own site. No account, no rate limit, CORS enabled. Plus a drop-in embed ...
- Free OSINT Tool & Digital Footprint Search
Free OSINT tool for digital footprint audits and username reconnaissance across 500+ platforms. Check email breach exposure, DNS a...
- Free OSINT Tool & Online Investigation Platform
Free OSINT tool to search usernames across 500+ platforms, check email breach exposure, and audit digital footprints. Start your f...
- Is MyRecon Legit? OSINT Sources, Privacy & Pricing
Review MyRecon public data sources, privacy practices, free scan limits and optional ₹99 scan pack. Understand what a username res...
- Keep an Instagram public-profile evidence record
Record visible public observations with access context and distinguish source evidence from uncertain associations....
- MyRecon App for Android | Username Search & Breach Checks
The MyRecon Android app checks a username across many platforms from your own phone, watches for new breaches and checks passwords...
- MyRecon Pricing: Free Standard & ₹99 Extended Scans
Free accounts get 5 standard scans a day with sign-in. Pay ₹99 for unlimited standard scans, Deep Search and 10 Extended scans acr...
- MyRecon Product Walkthrough & Video Tour | OSINT Tools
Watch the 60-second MyRecon product video and explore guides for public username search, email breach exposure and your own digita...
- OSINT Cheat Sheet & Google Dork Generator
Free interactive OSINT cheat sheet and search dork generator. Search usernames, pastebins, cloud storage leaks, exposed directorie...
- OSINT Tools: Username, Breach, DNS & IP Lookup
Explore MyRecon OSINT tools: public username search, email breach checks, password exposure, WHOIS, DNS records and IP lookup. Rev...
- Personal Data & Footprint Removal Service
We find the accounts, listings and data-broker records tied to your name, then help you get them removed. A guided cleanup run by ...
- Privacy Policy: Guest Scans and Optional Accounts
How MyRecon handles guest scans, optional Google accounts, saved username reports, browser history and short-lived result caches....
- Public-source research video guides
Short captioned explainers for username checks, public-source research and digital footprint cleanup....
- Refund and Cancellation Policy
MyRecon Extended packs are one-time payments with no automatic renewal. Read the refund policy and get help with duplicate charges...
- Respond to unwanted Instagram contact
Focus on observed behaviour, safe evidence retention, official controls and exposure you can reduce without identifying a visitor....
- Reverse Username Lookup & Social Media Search
Free reverse username lookup to search handles across 500+ social media networks, forums, and developer sites. Check accounts with...
- Review a handle across social platforms
Check exact handles across public sources, review ambiguous responses and distinguish profile presence from registration availabil...
- Review a reverse username lookup
Treat a known username as a discovery starting point rather than a guarantee of identity, phone numbers or email addresses....
- Start a small OSINT practice exercise
Use your own known account to practice public-source discovery, verification and evidence logging with free tools....
- Terms of Use: Lawful OSINT and Research Only
The terms covering MyRecon: lawful use and authorised research only, no harassment or doxxing, results provided as is, rate limits...
- Turn a footprint check into a cleanup plan
Review your own public accounts, prioritize exposure you control and recheck the original sources after cleanup....
- Username Lookup & Social Media Username Checker
Check public usernames across 500+ platforms with MyRecon. Review social media profile leads, unknown results and username availab...
- Username Sweep vs Deep Search: OSINT Workflows
Compare MyRecon username sweep and Deep Search: platform coverage, evidence, profile graphs and when to use each tool for an autho...
- Verify a public claim before publishing
A claim-led newsroom workflow that separates discovery, original-source checks, media context and supported conclusions....
Data Breach Analyses & Incident Archive (57)
Technical analyses and credential exposure breakdown across 50+ major public data breaches.
- 1win Data Breach: 96,166,543 Accounts Exposed
On 2 November 2024, 1win was breached. 96,166,543 accounts were exposed, including dates of birth, email addresses, geographic loc...
- Addi Data Breach: 34,532,941 Accounts Exposed
On 25 March 2026, Addi was breached. 34,532,941 accounts were exposed, including age groups, credit scores, device information. My...
- Advance Auto Parts Data Breach: 79,243,727 Accounts Exposed
On 5 June 2024, Advance Auto Parts was breached. 79,243,727 accounts were exposed, including email addresses, names, phone numbers...
- AfD Data Breach: 345,439 Accounts Exposed
On 9 September 2026, AfD was breached. 345,439 accounts were exposed, including email addresses, email messages. MyRecon rates it ...
- ALIEN TXTBASE Stealer Logs Data Breach: 284,132,969 Accounts
On 15 February 2025, ALIEN TXTBASE Stealer Logs was breached. 284,132,969 accounts were exposed, including email addresses, passwo...
- Angel One Data Breach: 6,765,054 Accounts Exposed
On 1 April 2023, Angel One was breached. 6,765,054 accounts were exposed, including bank account numbers, dates of birth, email ad...
- Assurance Retraite Data Breach: 70,372 Accounts Exposed
On 1 September 2024, Assurance Retraite was breached. 70,372 accounts were exposed, including dates of birth, email addresses, fam...
- Blooms Today Data Breach: 3,184,010 Accounts Exposed
On 11 November 2023, Blooms Today was breached. 3,184,010 accounts were exposed, including email addresses, names, partial credit ...
- Burger King Russia Data Breach: 3,155,792 Accounts Exposed
On 25 August 2024, Burger King Russia was breached. 3,155,792 accounts were exposed, including dates of birth, email addresses, ge...
- Canadian Tire Data Breach: 38,306,562 Accounts Exposed
On 2 October 2025, Canadian Tire was breached. 38,306,562 accounts were exposed, including dates of birth, email addresses, gender...
- CarGurus Data Breach: 12,461,887 Accounts Exposed
On 14 February 2026, CarGurus was breached. 12,461,887 accounts were exposed, including email addresses, ip addresses, names. MyRe...
- Carhartt Data Breach: 12,933,413 Accounts Exposed
On 13 August 2026, Carhartt was breached. 12,933,413 accounts were exposed, including email addresses, names, phone numbers. MyRec...
- CDEK Data Breach: 19,218,203 Accounts Exposed
On 9 March 2022, CDEK was breached. 19,218,203 accounts were exposed, including email addresses, names, phone numbers. MyRecon rat...
- Chess.com (2026) Data Breach: 4,653,212 Accounts Exposed
On 3 August 2026, Chess.com (2026) was breached. 4,653,212 accounts were exposed, including email addresses, geographic locations,...
- Cit0day Data Breach: 226,883,414 Accounts Exposed
On 4 November 2020, Cit0day was breached. 226,883,414 accounts were exposed, including email addresses, passwords. MyRecon rates i...
- Combolists Posted to Telegram Data Breach, What Was Exposed
On 28 May 2024, Combolists Posted to Telegram was breached. 361,468,099 accounts were exposed, including email addresses, password...
- Crunchbase Data Breach: 559,908 Accounts Exposed
On 22 January 2026, Crunchbase was breached. 559,908 accounts were exposed, including email addresses, employers, job titles. MyRe...
- CyrusOne Data Breach: 373,460 Accounts Exposed
On 5 August 2026, CyrusOne was breached. 373,460 accounts were exposed, including email addresses, employers, job titles. MyRecon ...
- Data Breach Archive: What Was Taken and From Whom
Data breach archive: what was taken, from whom, how many people it touched and what to do about it. 5,947,354,599 accounts across ...
- Data Enrichment Exposure From PDL Customer Data Breach
On 16 October 2019, Data Enrichment Exposure From PDL Customer was breached. 622,161,052 accounts were exposed, including email ad...
- DemandScience by Pure Incubation Data Breach
On 28 February 2024, DemandScience by Pure Incubation was breached. 121,796,165 accounts were exposed, including email addresses, ...
- Domino's India Data Breach: 22,527,655 Accounts Exposed
On 24 March 2021, Domino's India was breached. 22,527,655 accounts were exposed, including email addresses, names, phone numbe...
- Double Counter Data Breach: 274,922 Accounts Exposed
On 4 October 2026, Double Counter was breached. 274,922 accounts were exposed, including email addresses, geographic locations, na...
- Eye4Fraud Data Breach: 16,000,591 Accounts Exposed
On 25 January 2023, Eye4Fraud was breached. 16,000,591 accounts were exposed, including email addresses, ip addresses, names. MyRe...
- Genesis Market Data Breach: 8,000,000 Accounts Exposed
On 5 April 2023, Genesis Market was breached. 8,000,000 accounts were exposed, including browser user agent details, credit card c...
- Gîtes de France Data Breach: 117,574 Accounts Exposed
On 16 May 2026, Gîtes de France was breached. 117,574 accounts were exposed, including booking details, email addresses, names. My...
- Gravatar Data Breach: 113,990,759 Accounts Exposed
On 3 October 2020, Gravatar was breached. 113,990,759 accounts were exposed, including email addresses, names, usernames. MyRecon ...
- Hathway Data Breach: 4,670,080 Accounts Exposed
On 17 December 2023, Hathway was breached. 4,670,080 accounts were exposed, including device information, email addresses, ip addr...
- Hjedd Data Breach: 13,204,029 Accounts Exposed
On 18 July 2022, Hjedd was breached. 13,204,029 accounts were exposed, including email addresses, ip addresses, passwords. MyRecon...
- Hot Topic Data Breach: 56,904,909 Accounts Exposed
On 19 October 2024, Hot Topic was breached. 56,904,909 accounts were exposed, including dates of birth, email addresses, genders. ...
- LimeLeads Data Breach: 17,838,396 Accounts Exposed
On 1 August 2019, LimeLeads was breached. 17,838,396 accounts were exposed, including email addresses, employers, geographic locat...
- LinkedIn Scraped Data (2021) Data Breach, What Was Exposed
On 8 April 2021, LinkedIn Scraped Data (2021) was breached. 125,698,496 accounts were exposed, including education levels, email a...
- Luxottica Data Breach: 77,093,812 Accounts Exposed
On 16 March 2021, Luxottica was breached. 77,093,812 accounts were exposed, including dates of birth, email addresses, genders. My...
- Mangatoon Data Breach: 23,040,238 Accounts Exposed
On 13 May 2022, Mangatoon was breached. 23,040,238 accounts were exposed, including auth tokens, avatars, email addresses. MyRecon...
- McGraw Hill Data Breach: 13,500,136 Accounts Exposed
On 10 April 2026, McGraw Hill was breached. 13,500,136 accounts were exposed, including email addresses, names, phone numbers. MyR...
- McKesson Data Breach: 6,404,340 Accounts Exposed
On 21 August 2026, McKesson was breached. 6,404,340 accounts were exposed, including dates of birth, email addresses, employers. M...
- Medela Data Breach: 423,947 Accounts Exposed
On 7 September 2026, Medela was breached. 423,947 accounts were exposed, including email addresses, employers, job titles. MyRecon...
- National Public Data Breach: 133,957,569 Accounts Exposed
On 9 April 2024, National Public Data was breached. 133,957,569 accounts were exposed, including dates of birth, email addresses, ...
- Neogen Data Breach: 435,963 Accounts Exposed
On 29 August 2026, Neogen was breached. 435,963 accounts were exposed, including email addresses, employers, job titles. MyRecon r...
- Nitro Data Breach: 77,159,696 Accounts Exposed
On 28 September 2020, Nitro was breached. 77,159,696 accounts were exposed, including email addresses, names, passwords. MyRecon r...
- Not SOCRadar Data Breach: 282,478,425 Accounts Exposed
On 3 August 2024, Not SOCRadar was breached. 282,478,425 accounts were exposed, including email addresses. MyRecon rates it 53/100...
- Paidwork Data Breach: 23,272,765 Accounts Exposed
On 29 March 2026, Paidwork was breached. 23,272,765 accounts were exposed, including bank account numbers, dates of birth, device ...
- PlayCyberGames Data Breach: 3,681,753 Accounts Exposed
On 9 August 2023, PlayCyberGames was breached. 3,681,753 accounts were exposed, including email addresses, passwords, usernames. M...
- Prosper Data Breach: 17,605,276 Accounts Exposed
On 1 September 2025, Prosper was breached. 17,605,276 accounts were exposed, including browser user agent details, credit status i...
- Public Business Data Breach: 27,917,714 Accounts Exposed
On 19 August 2021, Public Business Data was breached. 27,917,714 accounts were exposed, including dates of birth, email addresses,...
- QuestionPro Data Breach: 22,229,637 Accounts Exposed
On 21 May 2022, QuestionPro was breached. 22,229,637 accounts were exposed, including browser user agent details, email addresses,...
- RailYatri Data Breach: 23,209,732 Accounts Exposed
On 26 December 2022, RailYatri was breached. 23,209,732 accounts were exposed, including email addresses, genders, names. MyRecon ...
- Sharecare Data Breach: 318,185 Accounts Exposed
On 12 August 2026, Sharecare was breached. 318,185 accounts were exposed, including dates of birth, email addresses, employers. My...
- SoundCloud Data Breach: 29,815,722 Accounts Exposed
On 15 December 2025, SoundCloud was breached. 29,815,722 accounts were exposed, including avatars, email addresses, geographic loc...
- Suno Data Breach: 55,282,226 Accounts Exposed
On 25 November 2025, Suno was breached. 55,282,226 accounts were exposed, including email addresses, names, partial credit card da...
- Synthient Credential Stuffing Threat Data Breach
On 11 April 2025, Synthient Credential Stuffing Threat Data was breached. 1,957,476,021 accounts were exposed, including email add...
- Synthient Stealer Log Threat Data Breach, What Was Exposed
On 11 April 2025, Synthient Stealer Log Threat Data was breached. 182,962,095 accounts were exposed, including email addresses, pa...
- The Post Millennial Data Breach: 56,973,345 Accounts Exposed
On 2 May 2024, The Post Millennial was breached. 56,973,345 accounts were exposed, including email addresses, genders, ip addresse...
- Tokopedia Data Breach: 71,443,698 Accounts Exposed
On 17 April 2020, Tokopedia was breached. 71,443,698 accounts were exposed, including dates of birth, email addresses, genders. My...
- Twitter (200M) Data Breach: 211,524,284 Accounts Exposed
On 1 January 2021, Twitter (200M) was breached. 211,524,284 accounts were exposed, including email addresses, names, social media ...
- Under Armour Data Breach: 72,742,892 Accounts Exposed
On 17 November 2025, Under Armour was breached. 72,742,892 accounts were exposed, including dates of birth, email addresses, gende...
- Wattpad Data Breach: 268,765,495 Accounts Exposed
On 29 June 2020, Wattpad was breached. 268,765,495 accounts were exposed, including bios, dates of birth, email addresses. MyRecon...
Breach Case Files & Historical Studies (61)
In-depth historical investigations covering attack vectors, regulatory outcomes, and defense lessons.
- 0ktapus Phishing 2022: Twilio, Signal and the MFA Lesson
A single SMS phishing campaign harvested credentials and one-time codes from employees at more than 130 companies....
- 23andMe Breach 2023: How 6.9 Million Were Exposed
Attackers logged into 14,000 accounts with recycled passwords. A feature that connects relatives then exposed 6.9 million people w...
- Aadhaar Data Exposure 2018: What Was Reported
Reports of Aadhaar data being sold and leaked through third-party systems were denied by the authority as breaches of its database...
- Accellion FTA Breach 2021: The First Mass File Transfer Hack
Attackers found zero-day flaws in a twenty-year-old file transfer appliance nearing end of life and used them to rob central banks...
- Adobe Breach 2013: Encrypted Passwords, Plaintext Hints
Adobe encrypted its passwords instead of hashing them, then stored every password hint in plain text beside them, turning the dump...
- AIIMS Delhi Ransomware Attack, November 2022
Ransomware took India...
- Air India Data Breach 2021: The SITA Supply Chain Hit
Air India lost 4.5 million passengers...
- Anthem Breach 2015: 78.8 Million Health Records
A database administrator noticed a query running under his own name that he had not run. Behind it were 78.8 million member record...
- Ashley Madison Hack 2015: What Was Leaked and Why
The Impact Team did not sell the Ashley Madison data. They published it, 32 million people, a paid deletion service that did not d...
- AT&T Breach 2024: Call Records of 109 Million
AT&T lost six months of call and text metadata for nearly all its mobile customers. Not what was said, who spoke to whom, how ...
- British Airways Data Breach 2018: The Magecart Attack
A small change to a script on the BA payment page sent card details to the attackers as customers typed them....
- British Library Cyber Attack 2023: Rhysida
Rhysida exfiltrated around 600GB and auctioned it. The lasting damage was not the data leaving, it was that thirty years of accumu...
- Cambridge Analytica Scandal: What Actually Happened
Data on 87 million Facebook users reached a political consultancy. Nothing was hacked. The platform handed it over through a docum...
- Capital One Breach 2019: The SSRF That Reached S3
A misconfigured web application firewall let an attacker ask the cloud for its own credentials, then read 106 million credit card ...
- Change Healthcare Hack 2024: 190 Million Records
A remote access portal without multi-factor authentication let ransomware into the company that processes a third of American medi...
- Clearview AI: The Face Search Engine Regulators Banned
Clearview AI built a face search engine from three billion images scraped off the public web, sold it to police forces, and then h...
- Collection #1 Explained: 773 Million Email Addresses
Collection #1 was not a hack. It was 87GB of everyone else...
- Colonial Pipeline Ransomware 2021: One VPN Password
A disused VPN account with no second factor let ransomware into the company that supplies nearly half the US East Coast...
- Data Breach Case Files: How They Actually Happened
In-depth case files on the data breaches that mattered: how the attackers actually got in, what was taken, what it cost, and what ...
- Dropbox Breach 2012: One Reused Employee Password
A Dropbox employee used their LinkedIn password on a corporate account. When LinkedIn was breached, so was Dropbox, 68 million cre...
- eBay Data Breach 2014: 145 Million Records Explained
Attackers used a handful of employees...
- Equifax Data Breach 2017: How It Happened
The Equifax breach exposed 147.9 million people. A patch had been available for two months, and an expired certificate meant nobod...
- Facebook 533 Million Leak: Scraping, Not Hacking
Facebook was right that nobody broke in. Attackers abused a feature working as designed to match hundreds of millions of phone num...
- First American Data Leak 2019: 885 Million Files
Sixteen years of mortgage paperwork, bank details, Social Security numbers, wire receipts, sat behind sequential document IDs in a...
- Heartland Breach 2008: 130 Million Cards, PCI Certified
Heartland was certified compliant with the card industry security standard. A SQL injection flaw let attackers plant a sniffer on ...
- Home Depot Data Breach 2014: How 56 Million Cards Leaked
Attackers used a third-party vendor...
- iRhythm Data Breach 2026: Timeline and Exposed Data
iRhythm reported third-party application access in June 2026 and began notices in October. Review the confirmed timeline, exposed ...
- JPMorgan Chase Hack 2014: 83 Million Households
A bank spending a quarter of a billion dollars a year on security lost contact data for 83 million households because a single ser...
- Kaseya VSA Ransomware Attack, July 2021
REvil exploited zero-days in Kaseya...
- LastPass Breach 2022: Stolen Vaults and What Followed
An engineer...
- Latitude Financial Breach 2023: 14 Million Records
Around 7.9 million driver...
- LinkedIn Breach 2012: From 6.5M Hashes to 165M
LinkedIn stored passwords as unsalted SHA-1. Six and a half million hashes leaked in 2012; four years later the full 165 million-a...
- Marriott Starwood Breach: 339 Million Guest Records
Marriott bought Starwood in 2016. The reservation database it acquired had already been compromised for two years, and nobody foun...
- Medibank Hack 2022: Refusing to Pay, and the Fallout
Medibank refused to pay the ransom. The attackers published 9.7 million customers...
- MGM Resorts Hack 2023: Scattered Spider Explained
Attackers found an MGM employee on LinkedIn, called the IT help desk pretending to be them, and got a password reset....
- MobiKwik Data Leak 2021: What Was Actually Established
Data said to cover 99 million MobiKwik users was offered for sale with a portal where anyone could look themselves up....
- Morrisons Data Leak 2014: The Insider Case That Set UK Law
A senior internal auditor with a grudge copied the payroll file of nearly 100,000 Morrisons staff and posted it online....
- MOVEit Breach 2023: One Bug, Thousands of Victims
A zero-day in a file transfer product let one criminal group steal data from thousands of organisations over a single weekend, mos...
- MySpace Breach: 360 Million Old Accounts, Still Dangerous
The MySpace passwords were years old and the site was long abandoned. That is exactly why the breach worked, abandoned accounts st...
- National Public Data Breach: Billions of Records Leaked
A background-check broker most people had never heard of leaked a file advertised at 2.9 billion records, including Social Securit...
- NotPetya 2017: The Most Expensive Cyberattack Ever
A backdoored update to Ukrainian tax software destroyed the networks of shipping lines, drugmakers and food companies worldwide wi...
- Okta Support System Breach 2023: HAR Files
Attackers reached Okta...
- OPM Breach 2015: The Security Clearance Files
The US government lost the background investigation files of 21.5 million people, every relationship, debt and indiscretion disclo...
- Optus Data Breach 2022: The Unauthenticated API
An internet-facing Optus API required no authentication at all. Anyone who found it could walk the customer database, including id...
- PlayStation Network Hack 2011: What Really Happened
Sony took PlayStation Network down for 23 days after attackers took 77 million account records. The ICO later found the attack cou...
- RockYou Breach 2009: The Origin of rockyou.txt
A widget company stored 32 million passwords in plain text and lost them to a SQL injection. The file became the famous wordlist s...
- SingHealth Breach 2018: A Targeted Attack
An advanced attacker spent months inside Singapore...
- Snowflake Breaches 2024: Stolen Logins, No MFA
Around 165 companies including Ticketmaster and AT&T lost data from cloud warehouses via credentials stolen by infostealer mal...
- SolarWinds SUNBURST Hack 2020: How It Happened
Attackers compromised SolarWinds...
- Sony Pictures Hack 2014: Wiper Malware and Leaks
Attackers took everything a film studio had, emails, salaries, medical records, unreleased films, then wiped the machines and publ...
- Star Health Data Leak 2024: Telegram Chatbots
Policy documents and medical reports belonging to Star Health customers were served on demand by Telegram chatbots, a leak distrib...
- T-Mobile Breach 2021: How 76 Million Records Leaked
An internet-exposed router led to a data centre and then to records on tens of millions of people, most of whom had only ever appl...
- TalkTalk Data Breach 2015: SQL Injection, Fines, Fallout
TalkTalk lost 156,959 customers...
- Target Data Breach 2013: The HVAC Vendor Route In
Attackers entered Target...
- TJX Breach 2007: WEP, 45 Million Cards, PCI DSS
Attackers sat outside a Marshalls store, broke the shop...
- Twitter Breach 2022: The API That Deanonymised Accounts
A bug let anyone submit an email address or phone number and be told which Twitter account it belonged to....
- Uber 2016 Breach: The $100,000 Cover-Up
Uber lost 57 million records, paid the attackers $100,000 through its bug bounty programme, called it a research payment, and said...
- Uber Breach 2022: MFA Fatigue and a Hardcoded Key
A contractor...
- VTech Breach 2015: When Children's Data Leaked
A breach of a children...
- WannaCry Ransomware 2017: The NHS Attack
A leaked intelligence-agency exploit turned ransomware into a worm that needed nobody to click anything. Microsoft had shipped the...
- Yahoo Data Breach: 3 Billion Accounts Explained
Yahoo lost every account it had, three billion of them, in two separate intrusions, then disclosed them three years later in the m...
Social Media & Platform Lookup Guides (4)
Platform-specific guides to discovering accounts, handles, and public profile visibility.
- Discord Users: Names, IDs & Verification Limits
Distinguish Discord usernames, display names and user IDs using official client workflows. MyRecon has no direct Discord account c...
- Find a GitHub Profile: Search Syntax & Privacy Checks
Use GitHub user search, distinguish personal and organization profiles, and audit profile email separately from public commit emai...
- Instagram OSINT & Public Username Lookup
Find an Instagram profile from a known handle, review signed-out visibility, handle name collisions and use official privacy or re...
- Username Search by Platform
Use specific GitHub, Instagram and Discord workflows, and distinguish exact handles, display names, login restrictions and unsuppo...
OSINT & Cybersecurity Investigation Guides (39)
Defensive methodologies, source verification protocols, and personal security workflows.
- Account Hacked? The First Hour, Step by Step
A runbook for the hour after an account is taken: regain access, revoke sessions, and find the quiet changes attackers leave behin...
- Brand Impersonation: Review, Evidence & Reporting
Build an official account register, triage brand lookalikes, save an evidence packet and verify the outcome of a platform report....
- Build a Data Breach Monitor With a Free API
A working breach monitor in about forty lines of Python, using a free keyless JSON API. Polling, change detection, alerting, and t...
- Digital Footprint Audit: A Practical Action Checklist
Audit your own accounts using saved records, signed-out profile checks, a prioritized action log and verification after each priva...
- DNS Records Explained: A, MX, TXT, NS and More
A plain-English guide to DNS record types, A, AAAA, MX, NS, TXT, CNAME, SOA, CAA, what each one does, and what it reveals during a...
- Do People-Search Apps Actually Find Anything?
What AI people-search apps really query, the two-minute test that shows whether one works, and the checks to run on a store listin...
- EXIF Data: What Your Photos Reveal About You
What is stored inside an image file, which platforms strip it and which do not, how to read it, and why a missing timestamp proves...
- How Data Breaches Actually Happen: The Seven Ways In
Almost every large data breach starts one of seven ways. What each route looks like, which famous cases it produced, and what actu...
- How Data Brokers Collect and Sell Your Data
Who data brokers are, where they get your information, how they profit from it, and the practical steps you can take to opt out an...
- How to Check If Your Email Was in a Data Breach
Learn what a data breach is, how to check whether your email address was exposed, and the exact steps to protect your accounts if ...
- How to Clear Your Digital Footprint: Cleanup Steps
A step-by-step routine to find, shrink and control the public data about you online, from breach checks and password hygiene to de...
- How to Create and Manage Strong Passwords
Why password reuse is dangerous, how to create strong passwords, why a password manager is the real fix, and how to check whether ...
- How to Investigate a Suspicious Domain Safely
A repeatable workflow for investigating a domain you don...
- How to Lock Down Your Social Media Privacy
A settings-by-setting guide to reducing what strangers can see and find on your social media, from discoverability to location his...
- How to Read a Data Breach Notification Email
What the phrases in a breach notice actually mean, which exposed fields matter most, how to tell a real notice from a phishing ema...
- How to Read an Email Header and Trace a Message
The fields that tell you where a message really came from, which ones can be forged, and the one line that settles most questions ...
- How to Spot a Phishing Email or Fake Website
A practical checklist for spotting phishing emails and scam websites: the red flags, how to inspect a link or domain safely, and w...
- How to Verify an OSINT Finding Before Acting
A matching username is not proof of identity. A practical method for confirming a profile really belongs to who you think, and the...
- IP Geolocation and Reverse DNS Explained
How IP geolocation is estimated, what ASN and hosting flags mean, and how reverse DNS gives investigators a useful clue about a se...
- Log Public Web Evidence: URLs, Context & Integrity
Create a reproducible public-source evidence register with timestamps, access context, restricted screenshots and honest hash limi...
- OSINT & Digital Footprint Guides
Use focused workflows for account audits, research note protection, brand impersonation review and evidence logging....
- Passkeys Explained: How Passwordless Login Works
What a passkey actually is, why a convincing fake site cannot use one, what happens when you lose the device, and the recovery pat...
- Protect Research Notes: Storage, Sharing & Retention
Protect research notes with restricted sharing, a signed-out permission test, secret separation, redaction checks and a retention ...
- Remove Your Personal Info From Search Results
Delisting from a search engine is not deletion from the web. The order that actually works, the requests that succeed, and what no...
- Reverse Image Search: Trace a Photo's Origin
How reverse image search works, which tools to use, and a practical workflow for verifying photos, spotting fake profiles and trac...
- Search Operators for OSINT and Self-Audit
The operators that still work, the ones quietly retired, and how to use them to audit what the web already publishes about you....
- Search Usernames Across Platforms: Review & Action
Run a public username sweep, review source URLs, confirm your own old accounts and turn candidate results into verified account ac...
- SIM Swap Attacks: How Phone Numbers Get Stolen
How attackers move a number to their own SIM, why losing signal is the first symptom, the settings that prevent it, and what to do...
- SPF, DKIM and DMARC Explained for Email Security
A plain-English guide to SPF, DKIM and DMARC, the DNS records that stop spammers spoofing your domain, how they work together, and...
- Stealer Logs: Why Your Password Leaked With No Breach
Understand how infostealer malware exposes credentials, how device infections differ from service breaches, and what to check afte...
- Subscription Trap Apps: How to Cancel and Get a Refund
The design patterns behind apps that bill you weekly, how to cancel on Google Play and the App Store, how to request a refund, and...
- Two-Factor Authentication: A Complete 2FA Guide
What two-factor authentication is, why it stops most account takeovers, the different 2FA methods ranked by security, and how to s...
- Username Checker False Positives: A Review Workflow
Recognize soft errors, generic login pages and ambiguous responses. Use verified controls and distinguish found, not found and unk...
- Username OSINT: Find Accounts Across Platforms
How username enumeration works across social and developer platforms, why a match is not proof of identity, and how to verify a pr...
- Verify OSINT Account Matches
Verify username leads with original URLs, independent public links, conflicts and an illustrative decision log. Keep unresolved ma...
- What a Website's HTTP Response Tells You
200, 404, 403 and 429 mean very different things when you check whether an account exists. How to read platform responses, and why...
- What Is OSINT? Open-Source Intelligence Explained
A clear beginner...
- WHOIS and RDAP Explained: Who Owns a Domain?
Understand a domain...
- Why Username Checkers Report Fake Accounts
We measured what 24 platforms return for a real handle and an invented one. On several the responses are identical, which is why c...
Privacy Protection & Data Broker Opt-Outs (1)
Step-by-step removal guides for people-search sites, data brokers, and public search records.
- Account Deletion & Online Privacy Guides
Separate account deletion, broker opt-outs and search-result removal. Prepare exports, use official channels and verify each reque...
OSINT Tool Technical Comparisons (7)
Benchmark comparisons and feature evaluations against CLI scripts and commercial scanners.
- MyRecon vs BeenVerified: OSINT Tools Compared
Compare MyRecon and BeenVerified: search inputs, public workflows, and verification limits. Choose an OSINT tool for authorized re...
- MyRecon vs DeHashed: OSINT & Breach Workflows Compared
Compare MyRecon and DeHashed: search inputs, breach workflows and verification limits. Choose an OSINT tool for authorized researc...
- MyRecon vs Have I Been Pwned: Breach Checks Compared
Compare Have I Been Pwned and MyRecon: breach information, password-exposure checks, public username research and the limits of ea...
- MyRecon vs Intelligence X: OSINT Workflows Compared
Compare MyRecon and Intelligence X: search inputs, search archives and verification limits. Choose an OSINT tool for authorized re...
- MyRecon vs LeakCheck: OSINT & Credential Tools Compared
Compare MyRecon and LeakCheck: search inputs, credential exposure and verification limits. Choose an OSINT tool for authorized res...
- MyRecon vs Sherlock: Workflow, Cost & Limits
Compare Sherlock local CLI research with MyRecon browser access, current scan limits, paid features and public-source verification...
- OSINT Tool Comparisons
Compare browser username checks, local command-line tools and breach lookups by input, access, output evidence and practical limit...
Investigative Blog & Research Articles (38)
Original research articles on digital privacy, threat intelligence, and OSINT techniques.
- Ahold Delhaize October 2026 Cyber Incident
Ahold Delhaize reported service disruption in October 2026. Its October 19 update did not confirm theft of sensitive customer data...
- Best Username Search Tools: Choose by Evidence and Workflow
Choose a username search tool for browser checks, local workflows or enriched reports. Learn how to compare coverage, false positi...
- Breach Date vs Disclosure Date: Read the Timeline
Understand breach dates, disclosure dates and catalogue additions. Read a new breach alert without mistaking an older incident for...
- Delete vs Deactivate an Account: What to Choose
Account deletion and deactivation differ. Check exports, subscriptions, linked sign-ins, waiting periods and search-result cleanup...
- Digital Footprint Audit: A Self-Check Worksheet
Use this worksheet to inventory public profiles you control, prioritise privacy changes, track deletion requests and review result...
- Digital Footprint Checker by Email & Username
Check your digital footprint using email records, breach checks and public usernames. Verify old accounts and turn findings into a...
- Digital Footprint Checker: Complete Self-Audit Guide (2026)
Audit your digital footprint using known usernames, email exposure checks and public profile review. Record verified accounts and ...
- Doxxing Prevention & Anti-Harassment Guide (2026)
Learn how to defend yourself from doxxing and online harassment. Complete step-by-step checklist to lock down usernames, public re...
- Find Public Social Media Accounts: An Ethical Guide
Review public social media profile candidates with permission. Use usernames and source evidence, and keep uncertain ownership mat...
- Found an Old Account? Secure, Update or Delete It
If you locate a forgotten account you control, confirm access, update recovery details, check for misuse and close it safely if yo...
- Free OSINT Tools for Beginners: A Practical First Workflow
Build a free beginner OSINT workflow with public web search, username checks, archives and file metadata. Learn what free access i...
- Free OSINT Tools for Investigators & Privacy Audits
Discover the top free OSINT tools for username enumeration, breach intelligence, domain analysis, and metadata extraction. Complet...
- Genesys October 2026 Security Incident
Genesys reports unauthorized access to internal LMS and CRM systems. Understand the confirmed scope and how to verify suspicious m...
- How to Check if Your Email Was in a Data Breach
Check your own email for breach exposure, understand the limits of results and follow practical steps to secure affected accounts....
- How to Delete Old Online Accounts Safely
Find accounts you own, save important data, cancel linked services and request deletion in the right order. A practical checklist ...
- How to Find Hidden Social Media Profiles by Username
Discover how investigators find alternate accounts, secondary profiles, and hidden social media footprints using public username i...
- How to Find Your Own Old Social Media Accounts
Use old inboxes, saved logins and your own usernames to locate forgotten accounts you control. Confirm ownership before changing o...
- How to Remove Your Personal Information Online
A comprehensive step-by-step checklist to delete old accounts, remove personal data from Google search, opt out of data brokers, a...
- How to Respond to a Social Media Impersonator
Preserve evidence, report an impersonating profile through the platform, secure your accounts and help contacts avoid scams withou...
- Instagram OSINT: Public Profile Checks & Limits
Check public Instagram bios, links and profile clues. Follow an evidence checklist, understand private-account limits, and reduce ...
- Instagram Privacy Check: Profile Audit Checklist
Review what strangers can see on your Instagram profile, check discovery and tagging controls, and secure the account you own with...
- Instagram Stalking and Privacy: Protect Your Account
Concerned about Instagram stalking? Review your own public exposure, preserve relevant evidence safely, use account controls and r...
- Instagram Username Search: Find a Public Profile
Search an Instagram username, check an exact profile link, handle login walls and renamed accounts, and verify public results with...
- iRhythm October 2026 Breach Notices
iRhythm began notifying affected people in October about data accessed in June 2026. Read the timeline, reported data types and pr...
- No Breach Results: What a Clean Check Means
A clean breach check is limited by provider coverage. Learn how to distinguish no match, unavailable checks and a confirmed accoun...
- OSINT Tools for Journalists: Sources, Media and Verification
A newsroom OSINT workflow for public profiles, archived pages and visual claims. Choose tools, retain sources and separate verifie...
- OSINT Tools, Username Search and Privacy Blog
Compare OSINT tools, search social media usernames, understand Instagram public profiles and check your digital footprint with sou...
- OSINT Username Search: Top Tools & Investigation Techniques
An in-depth guide to open-source username intelligence. Compare CLI scanners like Sherlock and Maigret with web engines like MyRec...
- Reverse Phone Lookup: Public Sources & Limits
Learn technical methods to trace phone numbers using carrier lookups, HLR validation, messaging platform discovery, and ethical OS...
- Reverse Username Lookup Across Social Platforms
Learn how reverse username lookups work, how to trace handles across 500+ social networks, and how to verify matching accounts wit...
- Reverse Username Search: Find Public Account Leads
Use reverse username search to review your public accounts. Separate profile matches, ownership evidence, missing pages and unknow...
- Sherlock vs Maigret vs MyRecon: Username Search Compared
Compare Sherlock, Maigret and MyRecon by setup, evidence, scope and reports. Follow a reproducible comparison method without confu...
- Social Media OSINT Tools for Public Profile Research
A practical social OSINT workflow for Instagram, TikTok, X, Reddit and other public profiles: discover handles, verify content and...
- Social Media Username Search & Account Checker
Search a username across social media, review account links and brand collisions, and organise confirmed, unrelated and unknown pu...
- Top 10 OSINT Tools for Public-Source Research in 2026
Compare 10 OSINT tools for usernames, social media, link analysis, archives and media verification. See selection criteria, costs ...
- Username Reuse and Privacy: Reduce Account Linkage
A reused handle can link profiles that were meant for different audiences. Learn how to audit your own usernames and reduce accide...
- Username Search Tools: Sherlock, Maigret & MyRecon
Compare the best OSINT username tools of 2026: Sherlock, Maigret, WhatsMyName, Blackbird, Epieos, UserSearch, and MyRecon. Web GUI...
- Why Online Privacy Matters: A Practical Guide
Online privacy gives you control over who can use your information, how it is combined and when it is shared. Learn what to review...