Proton launches Data Breach Observatory to track leaked personal data on the dark web

Proton has launched the Data Breach Observatory, a public, continuously updated portal that collects and reports personal data leaks found on dark‑web marketplaces. Working with risk detection firm Constella Intelligence, Proton says the initiative aims to make cybercrime data more transparent and warn victims early — even if the breached organizations haven’t disclosed incidents.

Proton argues that much of the breach data already exists publicly on underground markets, but it’s difficult to track without expertise. By monitoring these sources directly, the Observatory attempts to provide near real‑time visibility into compromises and help individuals and companies take faster action to mitigate harm.

How it works

• Dark‑web monitoring: Proton scans marketplaces and forums where stolen data is posted and traded.
• Near real‑time updates: The Observatory will be refreshed frequently to keep pace with new leak postings.
• Partnerships: Proton is working with Constella Intelligence to validate and contextualize the data it collects.

Why this matters

Relying on voluntary breach disclosure leaves gaps in public awareness. By aggregating evidence directly from criminal markets, Proton’s Observatory could reveal the true scale of data theft and give affected users an earlier heads‑up. Proton’s own research suggests 1,571 breaches in 2025 alone have exposed over 100 billion records — a volume that underscores the need for centralized tracking.

However, maintaining accurate, high‑quality coverage will be a challenge given the volume of leaks and the work required to verify claims. Still, a centralized, public record could pressure companies to be more transparent and improve incident response practices.

What to watch next

• How comprehensive and timely the Observatory’s coverage proves to be in practice.
• Whether regulators, security teams and the media use the Observatory as a reliable source for breach reporting.
• How companies respond if they find breaches listed before they’ve disclosed them publicly.

Discussion: Would you want a public tracker like Proton’s Observatory to alert you about leaks of your information — or are you worried about false positives and privacy implications?