01
Find relevant data
Search for leaked information linked to your company domains, including employee accounts, exposed passwords, and vendor records.
Dredging the dark web
Know what
lies beneath.
We find breached data linked to your organization across deep and dark web sources, explain the risk, and help you decide what to do next.
Dark web reconnaissance by Tuik Security Group
The scale of the search
Depth of coverage.
We draw on extensive breach datasets to connect exposed records to your organization.
Coverage snapshot ·
- Searchable recordsAcross our research sources
- More than 26 billion
- Data reservoirsIndividual breach datasets
- More than 24 thousand
How it works
Find the exposure.
Know what to do next.
Project Mariana searches, monitors, and indexes breached datasets from deep and dark web sources. We connect those findings to the people, vendors, and services your organization relies on.
02
Assess the risk
Identify who is affected, what information is exposed, and how it could be used against your business.
03
Plan your response
Prioritize account reviews, password changes, vendor follow-up, and employee guidance based on what the findings reveal.
Explore the examples
See the exposure.
Understand the risk.
Explore three ways leaked information can affect your business. See what your team receives, why it matters, and where to act.
EXAMPLE FINDINGPM / 001
A leaked password may put work accounts at risk.
The risk
If an exposed password is still used for work, an attacker could try it against company email, remote access, or other business services.
What we found
A review of example.com finds company email addresses and plaintext passwords across leaked datasets. The findings are organized into separate categories for review.
How your findings are organized
Accounts to review
Identify business accounts needing attention.
- Email addresses
avery.morgan@example.comjordan.lee@example.compurchasing@example.com
Credential data
Review exposed values without matched email addresses.
- Passwords
Cedar!Demo2025Harbor-Sample47SampleOnly#84WinterTide!Demo62
Lists are independent; their order does not indicate a match. These are fictional excerpts of the available data.
What to do next
- Compare exposed email addresses with your active accounts and review relevant sign-in activity.
- Add exposed passwords to blocklists where supported and replace any still in use through an approved internal review.
- Enable multifactor authentication and track each finding through review and remediation.
EXAMPLE FINDINGPM / 002
Accurate details can make a fake payment request convincing.
The risk
An attacker could use familiar company names and contact details to impersonate a supplier, request a bank-detail change, or send a convincing fake invoice.
What we found
Supplier-related datasets contain business contact information associated with your organization. Email addresses, company names, and phone numbers are available as separate data points.
How your findings are organized
Contacts to alert
Help finance and purchasing recognize the exposure.
- Email addresses
accounts.payable@example.compurchasing@example.comsupplier.team@example.com
Business details
See the information an impersonator might use.
- Company names
Example ManufacturingFictional Supply Co.
- Phone numbers
+1 (202) 555-0147+1 (202) 555-0186
Lists are independent; their order does not indicate a match. These are fictional excerpts of the available data.
What to do next
- Alert finance and purchasing to the exposed business information and the risk of supplier impersonation.
- Verify payment-detail changes through an established contact method, using details already on file.
- Review unexpected invoices or payment changes and ask the relevant supplier to investigate.
EXAMPLE FINDINGPM / 003
An old address can reveal access that needs a second look.
The risk
If a former employee’s account, session, or delegated access is still active, it may leave a way into your business. An old leak is a reason to check those controls.
What we found
Your team compares the exposed email list with its employee directory and recognizes former-staff addresses. Password findings are reviewed separately; the lists do not identify who used a particular password.
How your findings are organized
Accounts to check
Confirm access was removed when people left.
- Email addresses
casey.park@example.commorgan.reed@example.comsam.chen@example.com
Credential data
Review exposed values independently of former staff.
- Passwords
Atlas!Demo2024Seabird#Sample63
Lists are independent; their order does not indicate a match. These are fictional excerpts of the available data.
What to do next
- Check former-staff addresses against identity systems and business applications.
- Confirm accounts, active sessions, recovery methods, and delegated permissions have been removed as appropriate.
- Review exposed passwords separately and record the outcome of each access check.
Illustrative examples. No real people or customer data.
Why password reuse matters
A breach elsewhere.
A risk to your business.
When someone uses the same password for work and an outside service, a breach of that service can put their business account at risk.
Discuss exposed accounts- THE LEAK
An outside service is breached
A work email and reused password appear in leaked data.
- THE CONNECTION
A business identity becomes a target
Attackers may try credential reuse or more convincing phishing.
- THE RESPONSE
Find the exposure. Reduce the opportunity.
Review affected accounts, reset reused credentials, and strengthen authentication.
About Project Mariana
Built for security
and compliance teams.
Project Mariana is an initiative operated by Tuik Security Group. We examine publicly released leaks and privately traded breached datasets for information relating to your company.
We help your team understand which accounts and business relationships are affected, prioritize the risks, and decide where to act first.
Meet Tuik Security GroupStart a conversation
Understand your exposure.
Talk with our team.
What happens next
Tell us which company domains and business relationships you want to review. We’ll discuss the scope, your priorities, and how the findings can support your security team.
Send a message
Message sent
Thank you for reaching out. We’ll review your message and follow up to discuss your priorities and the scope of a review.
- Call us
- +1 (844) 305-0005
- Working hours
- 9 a.m.–6 p.m. Eastern
Please don’t include passwords, breach records, or sensitive account details. Read our privacy notice (opens in a new tab).