A data breach is the unauthorised exposure of private information — commonly usernames, emails, and passwords — that frequently ends up circulating in public or dark-web databases. Breach-checking services let investigators and individuals see whether an email or password has appeared in known breaches.
For OSINT, breach data reveals where an address has been used and can surface additional linked accounts; for defenders, it flags credentials that must be changed.