Breach Intel Dashboard

Live Breaches Threat Intelligence Dashboard

Built for security teams to follow publicly reported breaches and ransomware in near real time.

Screenshot of the Live Breaches Threat Intelligence Dashboard showing reported data breaches and ransomware incidents

Why this matters

When a company is breached, customer data can be stolen, systems can go offline, and trust can take years to rebuild. Knowing about a breach early helps security teams check their own exposure, reset passwords, and warn the people affected before attackers use the stolen data.

See publicly reported breaches shortly after they are published. This dashboard collects new data breaches and ransomware incidents in one place and checks for updates about every five minutes, so you don’t have to dig through dozens of sites. It only covers what has been publicly reported, so it is a starting point, not a complete picture.

It has three parts. Reported data breaches lists companies and services that had data exposed, how many records, and when. Ransomware incidents lists organizations recently hit by ransomware, where criminals lock up a victim’s systems and demand payment. Dark web news follows curated social accounts that report on leaks and emerging threats. It does not monitor the dark web directly.

Where the data comes from: breaches come from the Have I Been Pwned public breach feed, ransomware incidents from the Ransomware.live public incident feed, and dark web news from curated social accounts that report on it. Everything is public, and every list is searchable.

Built in public

This project is open and still growing. I’m building it in the open, sharing what I learn and what I change along the way.

  • See the code and follow updates on GitHub
  • Follow progress and new features on X

Open Live Breach Intel Dashboard

Frequently asked questions

How often does the dashboard update?

It checks for updates about every five minutes. New items appear after the source publishes them, which can take longer.

Where does the data come from?

Breaches come from the Have I Been Pwned public breach feed, ransomware incidents come from the Ransomware.live public incident feed, and dark web news comes from curated social accounts that cover leaks and emerging threats.

What is a data breach?

A data breach is when private information, such as emails, passwords, or customer records, is exposed to people who should not have it.

What is ransomware?

Ransomware is malicious software that locks up a victim’s files or systems until a ransom is paid. Attackers often also threaten to leak stolen data.

Is the dashboard free to use?

Yes. It uses public sources only, and you can search every list.

Need help with your own security program? See cybersecurity consulting.

Get new posts and updates by email.