Breach

Metadata record describing a single breach loaded into Have I Been Pwned.

SecurityData BreachesPwned PasswordsIdentityThreat IntelligenceCredential Stuffing

Properties

Name	Type	Description
Name	string	Stable Pascal-cased identifier; never changes.
Title	string	Descriptive breach title suitable for UI display.
Domain	string	Primary website domain associated with the breach.
BreachDate	string	Approximate date the breach occurred.
AddedDate	string	When the breach was loaded into HIBP.
ModifiedDate	string	Last modification timestamp.
PwnCount	integer	Approximate email addresses loaded for the breach.
Description	string	HTML-formatted description of the breach.
DataClasses	array	Alphabetically ordered list of data classes exposed.
IsVerified	boolean
IsFabricated	boolean
IsSensitive	boolean
IsRetired	boolean
IsSpamList	boolean
IsMalware	boolean
IsStealerLog	boolean
IsSubscriptionFree	boolean
LogoPath	string
Attribution	string

View JSON Schema on GitHub

JSON Schema

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://haveibeenpwned.com/schemas/breach.json",
  "title": "Breach",
  "description": "Metadata record describing a single breach loaded into Have I Been Pwned.",
  "type": "object",
  "required": ["Name", "Title", "Domain", "BreachDate", "AddedDate", "ModifiedDate", "PwnCount"],
  "properties": {
    "Name": { "type": "string", "description": "Stable Pascal-cased identifier; never changes." },
    "Title": { "type": "string", "description": "Descriptive breach title suitable for UI display." },
    "Domain": { "type": "string", "description": "Primary website domain associated with the breach." },
    "BreachDate": { "type": "string", "format": "date", "description": "Approximate date the breach occurred." },
    "AddedDate": { "type": "string", "format": "date-time", "description": "When the breach was loaded into HIBP." },
    "ModifiedDate": { "type": "string", "format": "date-time", "description": "Last modification timestamp." },
    "PwnCount": { "type": "integer", "minimum": 0, "description": "Approximate email addresses loaded for the breach." },
    "Description": { "type": "string", "description": "HTML-formatted description of the breach." },
    "DataClasses": { "type": "array", "items": { "type": "string" }, "description": "Alphabetically ordered list of data classes exposed." },
    "IsVerified": { "type": "boolean" },
    "IsFabricated": { "type": "boolean" },
    "IsSensitive": { "type": "boolean" },
    "IsRetired": { "type": "boolean" },
    "IsSpamList": { "type": "boolean" },
    "IsMalware": { "type": "boolean" },
    "IsStealerLog": { "type": "boolean" },
    "IsSubscriptionFree": { "type": "boolean" },
    "LogoPath": { "type": "string", "format": "uri" },
    "Attribution": { "type": "string" }
  }
}

Work with this as data

Every JSON Schema here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for schemas

4 MCP tools reach this

find_json_schemasBrowse and filter every JSON Schema in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This JSON Schema

curl "https://apis.io/api/v1/json-schemas/hibp-breach"

All schemas

curl "https://apis.io/api/v1/json-schemas?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.