Have I Been Pwned — Breach Checker

Have I Been Pwned — Breach Checker

Look up whether an email address has appeared in any publicly known data breaches. Uses the Have I Been Pwned v3 API.

Requires: HIBP_API_KEY in .env — $3.50/month subscription at haveibeenpwned.com/API/Key

When to Use

• User wants to know if their email was part of a data breach
• User wants a list of breaches an email was found in
• User is auditing accounts before a security review
• User asks "was my email leaked" or "has X been pwned"

How to Use

Check a single email for breaches

$email = "[email protected]"
$key   = $env:HIBP_API_KEY
$url   = "https://haveibeenpwned.com/api/v3/breachedaccount/$([Uri]::EscapeDataString($email))?truncateResponse=false"

$result = Invoke-RestMethod -Uri $url -Headers @{ "hibp-api-key" = $key } -ErrorAction SilentlyContinue

if ($null -eq $result) {
    Write-Host "✅ $email was NOT found in any known data breaches."
} else {
    Write-Host "⚠️  $email found in $($result.Count) breach(es):"
    $result | ForEach-Object {
        Write-Host "   • $($_.Name) ($($_.BreachDate)) — $($_.DataClasses -join ', ')"
    }
}

Check which passwords were exposed (pastes)

$email = "[email protected]"
$key   = $env:HIBP_API_KEY
$url   = "https://haveibeenpwned.com/api/v3/pasteaccount/$([Uri]::EscapeDataString($email))"