Systems and methods for detecting exposed data

A system for determining if sensitive data has been exposed externally, the system comprising:

• an internal database, wherein the internal database includes a plurality of internal repositories, wherein each of the plurality of internal repositories is identified by a hash, and wherein the plurality of internal repositories comprise the sensitive data;
• and
• a control circuit, the control circuit communicatively coupled to the internal database, the control circuit configured to:
• determine, based on a list of expressions, which repositories of a subject group of repositories include an expression from the list of expressions, wherein the subject group of repositories comprises at least hash search results based on a hash search query to an external database, wherein the hash search results include ones of a plurality of external repositories of the external database having hashes that match the hashes associated with ones of the plurality of internal repositories;
• generate, for each repository of the subject group of repositories that include the expression from the list of expressions, a notification;
• and
• transmit, based on a type of the notification, the notification, wherein one or more in the list of expressions are indicative of inclusion of the sensitive data.