Domain breach catalog (HIBP) API

Look up the public breaches affecting a domain via Have I Been Pwned's keyless catalog, normalized into a clean schema: each breach with date, accounts pwned, and exposed data classes, sorted newest-first, plus a rolled-up list of all distinct data classes leaked and the total accounts exposed. Answers 'what breaches hit acme.com', 'has this domain been breached', 'what data was exposed in breaches of this company', 'how many accounts leaked for this domain'.

Price$0.01per request

MethodPOST

Route/v1/security/email-breaches

StatusLive

MIME typeapplication/json

Rate limit60/minute

Cache3600s public

securitybreachbreacheshibphave-i-been-pwneddata-breachleakcompromise

API URLhttps://x402.hexl.dev/v1/security/email-breaches

Integration docs

Example request

{
  "domain": "adobe.com"
}

Example response

{
  "domain": "adobe.com",
  "breachCount": 1,
  "totalAccountsExposed": 152445165,
  "exposedDataClasses": [
    "Email addresses",
    "Password hints",
    "Passwords",
    "Usernames"
  ],
  "mostRecentBreach": "2013-10-04",
  "breaches": [
    {
      "name": "Adobe",
      "title": "Adobe",
      "breachDate": "2013-10-04",
      "addedDate": "2013-12-04T00:00:00Z",
      "pwnCount": 152445165,
      "dataClasses": [
        "Email addresses",
        "Password hints",
        "Passwords",
        "Usernames"
      ],
      "verified": true,
      "sensitive": false,
      "description": "In October 2013, 153 million Adobe accounts were breached...",
      "logo": "https://logos.haveibeenpwned.com/Adobe.png"
    }
  ]
}

Input schema

{
  "type": "object",
  "required": [
    "domain"
  ],
  "properties": {
    "domain": {
      "type": "string",
      "examples": [
        "adobe.com"
      ]
    }
  }
}

Output schema

{
  "type": "object",
  "additionalProperties": true
}