Is your data in a breach?
A password checked without being sent, the public breach list, what to do for each kind of data exposed, and a letter to ask for answers.
Has this password leaked before?
The password is turned into a fingerprint (SHA-1) on this device; only the first 5 characters of it are sent. Neither NOMVEX nor anyone else receives the password or its full fingerprint.
Known breaches
Public list of verified breaches (sensitive ones left out). Pick a service to see what to do.
Breach list: Have I Been Pwned (haveibeenpwned.com), Creative Commons Attribution 4.0 licence. Password check: Pwned Passwords. NOMVEX is not affiliated with Have I Been Pwned.
Getting alerts, and domains
- Free alert for your email address, to turn on yourself: Have I Been Pwned – Notify me
- You run the domain of an association or business? The domain search is free once you prove the domain is yours: Domain search
Ask the service what it holds about you
Letter under the GDPR (Articles 15 and 34), prepared on this device. You send it from your own mailbox; NOMVEX does not send or keep it.
Access request (GDPR Art. 15) and information on the data breach 2026-11-02 To the Data Protection Officer of Sir or Madam Dear Sir or Madam, Your service was affected by a personal data breach. My account is linked to the address . Under Article 15 of Regulation (EU) 2016/679 (GDPR), I ask you for: 1. confirmation that you process personal data about me, and a copy of that data; 2. the purposes, the recipients and how long the data is kept; 3. the source of the data if it was not collected from me. Under Article 34 GDPR, I also ask you to tell me which of my data were affected by this breach, its likely consequences and the measures taken to address it. Article 12(3) GDPR requires an answer without undue delay and at the latest within one month. Yours faithfully,