An email leak is the exposure of one or more email addresses, often from a breached system, public data dump, or extortion post. Even when no passwords or message content are exposed, a list of valid addresses can still be valuable to attackers because it confirms who works at an organization and how to contact them.
In cyber security, email leaks matter because they support phishing, impersonation, and social engineering. Attackers may send convincing messages that reference the exposed domain, or use the addresses to target password resets, account recovery flows, and credential attacks. Defenders should verify whether the exposed addresses are real, alert affected users, monitor for spoofed mail and unusual login attempts, and strengthen protections such as multifactor authentication, mailbox filtering, and user awareness training.