Leaks & breaches modules & options

The Public Leaks Search type offers a row of Modules. Each Module is a card you click that runs one search against a specific leak data source — or, in the case of OneScan, across several leak data sources at once. Selecting a Module loads its description, its Cost per search line and its query form. IntelX is the Module selected when the Search type opens.

Public Leaks Module row: IntelX (selected), OneScan (RECOMMENDED), Dehashed and HaveIBeenPwned tiles, with the entity-type tab strip and Search Query field below

The Modules

Four Module tiles were observed, each titled “Public Leaks” and distinguished by its data-source sub-label.

Module	Data source	Cost	Cost type
Public Leaks (Data: IntelX)	IntelX (Intelligence X)	$0.20	Fixed
Public Leaks (OneScan)	Multiple leak data sources	Dynamic (sum of enabled sources)	Dynamic
Public Leaks (Data: Dehashed)	Dehashed	Shown on the tile	Fixed
Public Leaks (Data: HaveIBeenPwned)	HaveIBeenPwned	Shown on the tile	Fixed

Public Leaks (Data: IntelX)

• Data source: IntelX / Intelligence X. Sub-label “IntelX leak database”; carries a stylised “X” logo.
• Cost: $0.20 per search — Fixed.
• What it returns: per its description panel, “Search public data leaks and breaches through Intelligence X. Find exposed credentials and personal data from known breaches.”
• Default: IntelX is the pre-selected Module for the Search type.

Note

IntelX is pre-selected as the app’s fixed out-of-box default for the Public Leaks Search type, not a persisted last-used selection (per Lee, 2026-07-10).

Public Leaks (OneScan)

• Data source: several leak data sources at once (see OneScan below).
• Cost: Dynamic — the sum of the leak data sources left enabled in its Choose Data Source modal (per Lee, 2026-07-08).
• What it returns: a merged result set spanning the enabled leak data sources; the results Data Source column attributes each row to the source it came from. Sub-label “Multi-source leak sc…” (truncated on screen).
• Carries a coral circular-target logo, a RECOMMENDED badge, a gear (settings) icon and a help (?) icon.

Public Leaks (Data: Dehashed)

• Data source: Dehashed. Sub-label “Dehashed data”; carries a QR-style square icon and a help (?) icon.
• Cost: Fixed — shown on the tile.

Caution

The exact Credit cost of the Dehashed Module was not captured. Read it on the Module tile in the app before running the search.

Public Leaks (Data: HaveIBeenPwned)

• Data source: HaveIBeenPwned. Sub-label “Email breach check”; carries an envelope icon and a help (?) icon.
• Cost: Fixed — shown on the tile.
• What it returns: oriented around email breach checks — reporting which known breaches an email address appears in (implied by its “Email breach check” descriptor).

Caution

The exact Credit cost of the HaveIBeenPwned Module was not captured. Read it on the Module tile in the app before running the search.

Caution

More Public Leaks Modules may exist than the four above. In the captured view the Module row extends past the right edge of the screen, so additional tiles could not be confirmed. Scroll the row in the app to see the full set.

Every Module tile carries a help (?) icon that opens Module-specific help; that help content was not captured.

OneScan — multi-source leak scan

OneScan is the RECOMMENDED, multi-source Module for this Search type. One OneScan search fans your identifier out across several leak data sources at once and merges the results, so you get broader coverage than any single-source Module in one run. In the results, the Data Source column shows which leak source each row came from.

Because it queries several data sources, OneScan’s cost is Dynamic: the price shown is the running sum of the leak data sources you leave enabled (per Lee, 2026-07-08). Toggling sources off lowers coverage and cost; toggling them on raises both. That trade-off is the lever you pull with the Choose Data Source modal.

Tip

Use OneScan for the broadest breach coverage in one pass when a variable Credit cost is acceptable. Use a single-source Module (for example IntelX at a Fixed $0.20) when you want a predictable cost against one source you trust.

The Choose Data Source config

The gear icon on the OneScan tile opens the Choose Data Source modal. For a multi-source Module this modal lists the individual leak data sources OneScan can query, each with a checkbox toggle and its own per-search cost, plus a Total cost line that sums the enabled sources. It also carries a “Remember my choice and hide this from future searches” checkbox, and a footer of Close / Reset / Apply Filters. Apply Filters commits your selection to the pending search.

Caution

The specific leak data sources inside Public Leaks OneScan, and their individual costs, were not captured — no screenshot of this Search type’s Choose Data Source modal exists. (The captured Choose Data Source example with Predicta and OsintIndustries belongs to the Username Intelligence Search type and must not be assumed to be the leak sources.) Open the modal in the app to see the exact leak sources and their costs, and to read the resulting Dynamic total.

Caution

Whether the data-source toggles and the “Remember my choice” setting are per-session defaults or persisted preferences was not confirmed (Lee could not confirm). Treat the captured behaviour as the observed default.

Per-search filters

Entity-type tabs

Public Leaks adds a horizontal entity-type tab strip above the Search Query field. Selecting a tab constrains the search to that kind of identifier before you enter your value. The observed tabs, left to right, are:

All · Email · Phone · IP · CIDR · MAC · Domain · URL · Bitcoin · IBAN · Card Number

All is selected by default, and the strip has a horizontal scrollbar, so more tabs exist beyond the right edge.

Caution

The tab strip continues past Card Number (its label was truncated on screen), so the full enumeration of entity types is not confirmed. Use the tab that matches your identifier as shown in the app.

The Filter control

A Filter control with a gear icon sits at the right end of the entity-tab row.

Caution

The contents and behaviour of this composer-side Filter control were not captured. Do not confuse it with the results-panel Filter: Found control, which narrows the visible rows after a search (see Reading results).

Related

• Leaks & breaches search: overview — what the Search type is for and the end-to-end flow.
• Reading Leaks & breaches results — how to read what these Modules return.
• How UserSearch works — Modules, OneScan and the Credit cost model in general.
• OneScan — the multi-source Module in depth.
• Data-source references: IntelX · Dehashed · HaveIBeenPwned.

Verified against UserSearch v2.0.20