In 2024, a database with 1.2 billion stolen passwords appeared on the Darknet. In 2023, hackers broke into the 23andMe genetic testing service and leaked the data of 7 million users. In 2022, the usernames and passwords of 500 million WhatsApp users leaked.
Your email or password could already be in such leaks. But how to check it? And what if you are really "pwned" (hacked)?
What does "Pwned" mean?
The term "pwned" (pronounced poond) is hacker slang, meaning that a system or account has been compromised. The word appeared due to a typo: instead of "owned" (hacked), someone wrote "pwned", and it became a meme in the IT community.
Now "Pwned" is not just jargon, but a whole ecosystem of services that help users check whether their data has fallen into the hands of intruders.
Have I Been Pwned (https://haveibeenpwned.com/Passwords ) is the most famous leak testing service In 2013, Australian cybersecurity expert Troy Hunt created the Have I Been Pwned (HIBP) website. This is a free service that collects data from all known leaks and allows you to check if your email or password is in the leaked databases.
How does it work?
HIBP scans:
- Public leaks (for example, hacks of LinkedIn, Adobe, Dropbox).
- Darknet forums where hackers sell databases.
- Pastebins (sites like Pastebin where stolen information is leaked).
When a new leak is discovered, HIBP adds it to its database. Now there are 12+ billion records.
How do I check if you have been hacked?
Email/password verification
, Go to the website.
Enter your email/password (the service is secure, the password is not saved, the verification is based on a hash).
If your email address/password is leaked, you will see a list of hacked services.
Example:
"Your email was found in 3 leaks: LinkedIn (2021), Adobe (2013), MyFitnessPal (2018)."
, If you are "pwned"
- Change the password to a more complex one.
- Enable two-factor authentication (2FA).
- Check other accounts where the same password was used.
- Subscribe to HIBP notifications to learn about new leaks.
▶ Alternative tools
DeHashed (https://www.dehashed.com /) — search by email, phone, IP.
Firefox Monitor (https://monitor.mozilla.org /) — checking for Mozilla leaks.
