Proton has unveiled its Data Breach Observatory, a new initiative designed to identify and report cyberattacks and data breaches using intelligence gathered directly from the dark web. The platform aims to uncover breaches that often go unreported or unnoticed, providing businesses with real-time insights into compromised data and emerging threat activity.
Unlike conventional breach reporting platforms that rely on voluntary disclosure, Proton’s system gathers verified evidence of breaches from criminal marketplaces and leak sites. It specifically excludes aggregated or recycled datasets, focusing only on data tied to a single identifiable organization to ensure accuracy and relevance.
Small Businesses and Key Sectors Among the Most Affected
According to Proton’s findings, small and medium-sized businesses (SMBs) are disproportionately affected by data breaches. Companies with 10–49 employees and 50–249 employees together accounted for 48% of recorded incidents, while firms with fewer than 10 employees represented 23%.
The retail and wholesale trade sector emerged as the most frequently targeted, responsible for over a quarter (25.4%) of all observed breaches. The technology industry followed at 15%, with media and entertainment accounting for 11%.
Proton’s analysis also revealed the types of data most often exposed in breaches:
- Email addresses appeared in 100% of exposures
- Names in 90%
- Contact details such as phone numbers and addresses in 72%
- Passwords in 49%
- Government or health records in 34%
Illuminating Hidden Breaches Before They Escalate
Eamonn Maguire, Proton’s Director of Engineering for AI and Machine Learning, said the initiative reflects the company’s mission to bring transparency to the hidden side of data exposure.
“Our mission with the Data Breach Observatory is simple — to reveal unseen breaches and alert affected organizations as they happen,” Maguire said. “By empowering businesses and individuals with early warnings, we can help prevent identity theft, limit financial losses, and reduce the impact of future breaches.”
Proton noted that over 300 million individual records have already surfaced on the dark web this year, underscoring the urgency of timely detection.
Continuous Monitoring Through Dark Web Intelligence
Developed in partnership with Constella Intelligence, the Data Breach Observatory will function as a continuously updated resource for identifying and analyzing ongoing breaches. By tracking illicit data exchanges and leak forums in real time, the system aims to alert victims even before they become aware of a compromise.
Through proactive monitoring and actionable intelligence, Proton’s new platform seeks to strengthen cyber resilience for organizations of all sizes — helping them respond faster, secure systems, and protect their customers in an increasingly data-driven threat landscape.
