Data Breach Checker: Look Up Any Company's Notification Letter (2026)

If a letter arrived from a company you barely remember doing business with, or you saw a breach headline and want to know whether your data was in it, this page shows you how to look it up — and what the record you find actually tells you.

How to Check a Company for a Data Breach

1. Search the registry. Use the breach search on our homepage and type the company name exactly as it appears on your letter or receipt. Company legal names differ from brand names — "T-A Solberg Co. Inc." files under its legal name even if the store sign says otherwise.
2. Check the filing date. Every record in the registry shows the date the company reported the breach to a state Attorney General. Companies must file within weeks of discovering a breach, so the filing date anchors the true incident timeline.
3. Read the exposed-data categories. The record summarizes what the company's own notice disclosed: Social Security numbers, payment cards, medical data, credentials, and so on.
4. Confirm against your letter. If the registry record matches the company that mailed you, your letter is genuine and you are within the affected class. Notification letters are not scams when the underlying filing is real — verify, don't discard.

Where These Records Come From

Every U.S. state has a breach notification law requiring companies to report incidents affecting residents to the state Attorney General. Those filings are public records. Our registry aggregates filings reported across state AG portals, verifies each against its official source, and publishes one page per filing — over 6,500 companies and counting, with new filings added as they are reported.

What a Match Means for You

• You are presumptively a class member for any settlement or litigation arising from that filing.
• The exposure categories in the record tell you which protective steps to take first: credit freeze for financial data, credential changes for logins, insurance review for medical data.
• The filing date starts the legal clock: statutes of limitations for breach claims run from the incident or its discovery, so the earlier you check, the more of your legal window remains.

If You Cannot Find the Company

Three common reasons, none of which mean your letter is fake:

• Name mismatch. Try the legal entity name from the letter's fine print, or a shorter fragment of the name.
• Very recent filing. New AG filings are added continuously; a notice mailed this week may not be published yet.
• Different state portal. Some filings surface in one state's portal weeks before others. Contact us and we will check the primary sources directly.

After You Find Your Record

Each registry page includes a free case review link. The review confirms whether litigation is pending, which deadlines apply in your state, and which compensation tier your exposure qualifies for. It costs nothing and carries no obligation. Start with a free review →

Frequently Asked Questions

Is this the same as the official settlement administrators' sites?

No. Settlement administrator sites only exist after a settlement is approved, and only for companies large enough to have reached that stage. This registry covers every AG filing, including the thousands of small-company breaches that never make headlines but still entitle letter recipients to legal options.

Can I check myself or a family member?

Yes — searching by company name requires no personal information. If you find a company where a relative received a letter, they can request their own review.

How current is the registry?

Filings are added as they are verified from official state sources. The registry currently covers 6,500+ companies with fresh 2026 filings added weekly.

Related: Search the Breach Registry · How to Read a Notification Letter · Free Case Review