Find out which web apps got your data breached based on email ID and phone number

[COSMOCRAT]

For email ID: https://haveibeenpwned.com/
Have I Been Pwned - Comparitively limited knowledgebase about the amount of leaks. But gives details about what exactly got compromised.

For email ID and phone no.: https://cybernews.com/personal-data-leak-check/
Cyber News - Bigger knowledgebase. Only the web apps that compromised your data will be listed. Nevertheless, you can individually pick the web app and google the details of the data breach to know what exactly got compromised. The only place I found that lets you look for your phone number too.

Note: Add country code '91' before your phone number. Just inserting the 10-digit phone number won't work.

 

[nomad]

Though these might be open source, why would you willingly enter your details on a third party website? How do you know there are no records being maintained for anything?

 

[COSMOCRAT]

Knowing your email on its own is not useful to anyone. You can write it anywhere in a public place and the worse that will happen is you get spam that you can easily filter.
It's only problematic when someone knows the password along with it. That is what this tool lets you identify, so you can quickly take action and change it.
The tool just runs a cross-search among all the leaked databases and sees if your email appears anywhere. If it does, it is also safe you assume the password is also compromised.
The leaked database will only have references to old passwords from that time, not the new one you took action and changed in the future.

But good on your part that you are questioning the process and not just blindly using the tool. 👍‍

 

[nomad]

Knowing your email on its own is not useful to anyone. You can write it anywhere in a public place and the worse that will happen is you get spam that you can easily filter.
It's only problematic when someone knows the password along with it. That is what this tool lets you identify, so you can quickly take action and change it.
The tool just runs a cross-search among all the leaked databases and sees if your email appears anywhere. If it does, it is also safe you assume the password is also compromised.
The leaked database will only have references to old passwords from that time, not the new one you took action and changed in the future.

But good on your part that you are questioning the process and not just blindly using the tool. 👍‍

Actually no, as you mentioned, just the email won't be enough and majority of times the password leaked are also hashed.
Very rarely it will happen that the unencrypted password would be leaked.

The first site mentioned here also allows you to enter your password and check if its compromised.
A lot of people do check that (did it way back in naivety) but what they don't realise is that there is no guarantee that this might not have been recorded and a new dictionary formed. Hence my comment.