Breach Scanner Results: What to Do Next
A breach search can show that an email address appeared in a known incident. It does not prove that a password still works, and an address with no reported match is not guaranteed to have never been exposed.
What to do after a match
Change the password on the affected service and anywhere else it was reused. Use unique passwords stored in a reputable password manager. Enable multifactor authentication, review active sessions and recovery details, and watch for unexpected password-reset or sign-in messages.
Never submit secrets
A legitimate breach lookup needs an email address or another supported identifier — never your password, full card number or one-time verification code. Use the DI VPN Breach Scanner with an account you control or are authorised to check.
Understand data limitations
Providers have different datasets and update schedules. Some incidents are unverified, and some exposures are never published. Treat the result as a useful signal, not an exhaustive audit of every account.
