Guide
How to tell if your customer data has leaked
The signs to look for and the places to check to find out whether your customer data is already exposed.
The hardest part of a data leak is that it's usually silent. Nobody sends you a notice. Here's how to find out for yourself, before it becomes a public problem.
Where to look
- Search your own domain and brand on the public web and in code-search engines — sometimes your data is sitting in a public repository or paste.
- Check breach-notification services. Free tools let you see whether your company email addresses appear in known breaches.
- Review access logs on your databases and key accounts for activity you can't explain — odd hours, unfamiliar locations, large exports.
- Audit what's public. Is any storage bucket, admin panel, or database reachable without a login? Assume anything reachable has been reached.
The warning signs
- Customers reporting spam or phishing that references real details only you held.
- Logins from places your team isn't.
- A spike in failed-login attempts (someone is trying stolen passwords).
If you find something
Don't panic and don't delete the evidence. Contain it (rotate the credential, close the access), figure out what was reachable, and check your notification obligations. Our breach-response guide walks the first hour step by step.
Want us to just handle it?
Send the details to [email protected] or book a call. We'll check it for you and fix what's exposed.