# Breaches

**Canonical:** https://apis.io/providers/breaches/  
**Website:** https://apievangelist.com  
**APIs profiled:** 0

An index and topic collection covering data breach intelligence, credential exposure databases, dark-web monitoring, and leak detection APIs. Breach intelligence platforms aggregate compromised credentials, stealer logs, ransomware leak-site posts, underground forum chatter, and dark-web marketplace listings into queryable APIs that security teams use to detect exposure of their organization, employees, customers, executives, and supply-chain partners. This collection indexes services like Have I Been Pwned for consumer breach lookup, Pwned Passwords for k-anonymity credential checks, enterprise breach intelligence platforms (CrowdStrike, Microsoft Defender, SentinelOne, Splunk), credential and identity exposure monitors (Okta, Auth0, 1Password, LastPass, Bitwarden), vulnerability and exposure feeds (NVD, CISA, Qualys, Rapid7, Tanium), and regulatory breach-notification authorities (CISA, FTC, NIST) that publish machine-readable feeds of disclosed breaches and known-exploited vulnerabilities.

## Kin Score — 9.6 / 100 (minimal)

Scored 2026-10-17 under rubric 0.24.0. Trend: flat (+0.1 from 9.5).

| Facet | Score |
|---|---|
| Discoverability | 48.2 |
| Contract Quality | 14.7 |
| Contract Governance | 0.0 |
| Operational Transparency | 5.3 |
| Developer Ergonomics | 9.5 |
| Access Clarity | 0.0 |

Regulatory layer — **Horizontal (data, software, accessibility, platform)**: 4.9 (matched via fallback).

## Agent readiness — 0.0 (human-only)

| Dimension | Value |
|---|---|
| Spec Presence | no |
| Agentic Access | no |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | no |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | no |
| Rate Limit Signal | no |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |
| Delegated Identity | no |
| Protected Resource Metadata | no |
| Dynamic Client Registration | no |
| Agentic Commerce | no |

## Use cases (8)

- **Employee Credential Exposure Monitoring** — Security teams continuously query breach intelligence APIs for corporate email domains to detect employee credentials exposed in third-party breaches and infostealer logs, trigg...
- **Customer Account Takeover Prevention** — Consumer applications integrate Pwned Passwords and breach lookup APIs at signup and login to block known-compromised credentials and notify customers of exposure.
- **Executive and VIP Protection** — Brand and executive protection teams use dark-web monitoring APIs to detect doxxing, leaked personal data, and impersonation targeting C-suite, board members, and high-value emp...
- **Third-Party and Supply-Chain Risk** — GRC teams ingest breach-notification feeds and regulatory disclosures via API to track breach incidents at vendors, suppliers, and partners that handle their data.
- **Ransomware Victim Intelligence** — Threat intel teams subscribe to ransomware leak-site feeds via API to alert on newly named victims relevant to their industry, supply chain, or geography.
- **Vulnerability Prioritization** — Vulnerability management teams combine NVD CVE data, CISA's Known Exploited Vulnerabilities (KEV) catalog, and commercial exposure platforms to prioritize patching based on brea...
- **Regulatory Breach Disclosure Compliance** — Privacy and legal teams query FTC, state AG, and EU DPA breach-notification APIs to track required disclosures and benchmark their own incident response.
- **AI Agent Breach Triage** — AI agents wired to breach intelligence APIs autonomously enrich security alerts with exposure context, correlate stolen credentials with active sessions, and draft incident-resp...

## Tags

Data Breach, Credential Exposure, Dark Web Monitoring, Threat Intelligence, Leak Detection, Breach Notification, Stealer Logs, Pwned Passwords

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/breaches/). Scores are computed from the provider's own public artifacts under a published rubric.