Saylor Innovations Data Desk

Live 402 challenge

Captured by the enrichment pass, not read just now. Prices can change — always read the 402 the endpoint answers with.

{
  "error": "Payment required to access this resource.",
  "accepts": [
    {
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "extra": {
        "memo": "saylor:datadesk:hibp-recent-brea",
        "name": "USD Coin",
        "note": "Base settles through an x402 facilitator. Send payload.signature and payload.authorization (EIP-3009); there is no self-submitted path on this network.",
        "version": "2",
        "facilitatorOnly": true,
        "assetTransferMethod": "eip3009"
      },
      "payTo": "0xA2A8dF0f7CaaBEa4e120a2568118f141569fc8aa",
      "amount": "10000",
      "scheme": "exact",
      "network": "eip155:8453",
      "maxTimeoutSeconds": 120
    },
    {
      "asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
      "extra": {
        "memo": "saylor:datadesk:hibp-recent-brea",
        "session": "eyJhcnRpY2xlSWQiOiJkYXRhZGVzazpoaWJwLXJlY2VudC1icmVhY2hlcyIsInJlZmVyZW5jZSI6IjdZZnpEd05Fc0p3cGRLcjhVcFpHSzlZUFpmOTZHcTJDV1BQcnNvZ2VoRkplIiwicmVjaXBpZW50IjoiN0xTamZySmY4Zk5zQjhWQTl1N04zV0VuMjVzbVFMcG9iM1N2eVV2WGFjeTciLCJtaW50IjoiRVBqRldkZDVBdWZxU1NxZU0ycU4xeHp5YmFwQzhHNHdFR0drWnd5VER0MXYiLCJtaW5BbW91bnQiOjEwMDAwLCJleHAiOjE3OTIyNTkyNTg5NDZ9.6UPnGuOBDXF1fHnEOvCjRIUKjz5ZK6bGbS3OvQG7ICM",
        "feePayer": "CjNFTjvBhbJJd2B5ePPMHRLx1ELZpa8dwQgGL727eKww",
        "reference": "7YfzDwNEsJwpdKr8UpZGK9YPZf96Gq2CWPPrsogehFJe"
      },
      "payTo": "7LSjfrJf8fNsB8VA9u7N3WEn25smQLpob3SvyUvXacy7",
      "amount": "10000",
      "scheme": "exact",
      "network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
      "maxTimeoutSeconds": 120
    }
  ],
  "resource": {
    "url": "https://saylorinnovations.com/api/breach/recent-breaches?days=90&limit=5",
    "tags": [
      "latest data breaches",
      "was a company breached recently",
      "have i been pwned breach list",
      "breaches that exposed passwords",
      "largest recent data breaches"
    ],
    "iconUrl": "https://saylorinnovations.com/og-image.jpg",
    "mimeType": "application/json",
    "description": "Data breach catalogue from Have I Been Pwned filterable by name or recency - accounts affected, data exposed, passwords flag, dates and a summary",
    "serviceName": "Saylor Innovations Data Desk"
  },
  "extensions": {
    "tags": [
      "latest data breaches",
      "was a company breached recently",
      "have i been pwned breach list",
      "breaches that exposed passwords",
      "largest recent data breaches",
      "breach details for a domain"
    ],
    "bazaar": {
      "info": {
        "input": {
          "type": "http",
          "method": "GET",
          "queryParams": {
            "days": "90",
            "limit": "5"
          }
        },
        "output": {
          "type": "json",
          "example": {
            "note": "Public breach catalogue from Have I Been Pwned (no account data is returned); added is when HIBP indexed the breach, which can be long after it happened.",
            "filter": {
              "q": null,
              "days": 90
            },
            "source": "Have I Been Pwned",
            "matches": 27,
            "breaches": [
              {
                "id": "Crunchbase",
                "name": "Crunchbase",
                "added": "2026-10-14",
                "domain": "crunchbase.com",
                "summary": "In January 2026, the private company intelligence platform Crunchbase was targeted in a ShinyHunters \"pay or leak\" extortion attempt . Data allegedly obtained from the company was subsequently published publicly and included 560k unique email addresses, large…",
                "accounts": 559908,
                "verified": true,
                "sensitive": false,
                "breach_date": "2026-01-22",
                "data_exposed": [
                  "Email addresses",
                  "Employers",
                  "Job titles",
                  "Names",
                  "Phone numbers",
                  "Physical addresses",
                  "Social media profiles"
                ],
                "passwords_exposed": false
              },
              {
                "id": "Sharecare",
                "name": "Sharecare",
                "added": "2026-10-12",
                "domain": "sharecare.com",
                "summary": "In August 2026, the digital health company Sharecare was the target of a ShinyHunters \"pay or leak\" extortion campaign . The group subsequently published data it claimed was taken from Sharecare's systems, containing 318k unique email addresses. Most of the d…",
                "accounts": 318185,
                "verified": true,
                "sensitive": false,
                "breach_date": "2026-08-12",
                "data_exposed": [
                  "Dates of birth",
                  "Email addresses",
                  "Employers",
                  "Genders",
                  "Government issued IDs",
                  "Job titles",
                  "Marital statuses",
                  "Names",
                  "Phone numbers",
                  "Physical addresses"
                ],
                "passwords_exposed": false
              },
              {
                "id": "Neogen",
                "name": "Neogen",
                "added": "2026-10-09",
                "domain": "neogen.com",
                "summary": "In August 2026, the food and animal safety organisation Neogen was the target of a ShinyHunters \"pay or leak\" extortion attempt . The group later published data it claimed had been obtained from Neogen. The data consisted largely of corporate contact records …",
                "accounts": 435963,
                "verified": true,
                "sensitive": false,
                "breach_date": "2026-08-29",
                "data_exposed": [
                  "Email addresses",
                  "Employers",
                  "Job titles",
                  "Names",
                  "Phone numbers",
                  "Physical addresses",
                  "Salutations"
                ],
                "passwords_exposed": false
              },
              {
                "id": "CyrusOne",
                "name": "CyrusOne",
                "added": "2026-10-07",
                "domain": "cyrusone.com",
                "summary": "In August 2026, data centre operator CyrusOne was the target of a ShinyHunters \"pay or leak\" extortion attempt . The group subsequently published data allegedly obtained from the company, which included 373k unique email addresses across records relating to u…",
                "accounts": 373460,
                "verified": true,
                "sensitive": false,
                "breach_date": "2026-08-05",
                "data_exposed": [
                  "Email addresses",
                  "Employers",
                  "Job titles",
                  "Names",
                  "Phone numbers",
                  "Physical addresses",
                  "Support tickets"
                ],
                "passwords_exposed": false
              },
              {
                "id": "DoubleCounter",
                "name": "Double Counter",
                "added": "2026-10-07",
                "domain": "doublecounter.gg",
                "summary": "In October 2026, the Discord server protection service Double Counter suffered a data breach attributed to a vulnerability in the Metabase analytics tool . In its disclosure notice, Double Counter advised that attackers gained access to a subset of its data. …",
                "accounts": 274922,
                "verified": true,
                "sensitive": false,
                "breach_date": "2026-10-04",
                "data_exposed": [
                  "Email addresses",
                  "Geographic locations",
                  "Names",
                  "Usernames"
                ],
                "passwords_exposed": false
              }
            ],
            "total_accounts_in_matches": 160865044,
            "total_breaches_in_database": 1045
          }
        }
      },
      "schema": {
        "type": "object",
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "required": [
          "input"
        ],
        "properties": {
          "input": {
            "type": "object",
            "required": [
              "type",
              "method"
            ],
            "properties": {
              "type": {
                "type": "string",
                "const": "http"
              },
              "method": {
                "enum": [
                  "GET",
                  "POST",
                  "PUT",
                  "PATCH",
                  "DELETE",
                  "HEAD"
                ],
                "type": "string"
              },
              "queryParams": {
                "type": "object",
                "properties": {
                  "days": {
                    "type": "string",
                    "description": "optional only breaches added in the last N days"
                  },
                  "limit": {
                    "type": "string",
                    "description": "optional 1-30, default 10"
                  }
                }
              }
            },
            "additionalProperties": false
          },
          "output": {
            "type": "object",
            "required": [
              "type"
            ],
            "properties": {
              "type": {
                "type": "string",
                "const": "json"
              },
              "example": {
                "type": "object",
                "required": [
                  "matches",
                  "breaches"
                ],
                "properties": {
                  "note": {
                    "type": "string",
                    "description": "Caveat or context for reading the result"
                  },
                  "filter": {
                    "type": "object",
                    "properties": {
                      "q": {
                        "description": "Name filter applied"
                      },
                      "days": {
                        "type": [
                          "number",
                          "null"
                        ],
                        "description": "Number of days"
                      }
                    },
                    "description": "Filter applied: name search and recency window in days"
                  },
                  "source": {
                    "type": "string",
                    "description": "Data source the values come from"
                  },
                  "matches": {
                    "type": "number",
                    "description": "Matching items"
                  },
                  "breaches": {
                    "type": "array",
                    "items": {
                      "type": "object",
                      "properties": {
                        "id": {
                          "description": "Identifier of the record"
                        },
                        "name": {
                          "description": "Name"
                        },
                        "added": {
                          "type": [
                            "string",
                            "null"
                          ],
                          "description": "Date added to Have I Been Pwned"
                        },
                        "domain": {
                          "description": "Domain name"
                        },
                        "summary": {
                          "description": "Short summary"
                        },
                        "accounts": {
                          "type": [
                            "number",
                            "null"
                          ],
                          "description": "Accounts affected"
                        },
                        "verified": {
                          "type": [
                            "boolean",
                            "null"
                          ],
                          "description": "True when the breach is verified"
                        },
                        "sensitive": {
                          "type": [
                            "boolean",
                            "null"
                          ],
                          "description": "True when the breach is flagged sensitive"
                        },
                        "breach_date": {
                          "description": "Breach date"
                        },
                        "data_exposed": {
                          "description": "Data exposed"
                        },
                        "passwords_exposed": {
                          "description": "Passwords exposed"
                        }
                      }
                    },
                    "description": "Breaches with name, domain, breach date, accounts affected, data classes exposed and verification flags"
                  },
                  "total_accounts_in_matches": {
                    "type": "number",
                    "description": "Total accounts in matches"
                  },
                  "total_breaches_in_database": {
                    "type": "number",
                    "description": "Total breaches in database"
                  }
                }
              }
            }
          }
        }
      }
    },
    "method": "GET",
    "example": {
      "note": "Public breach catalogue from Have I Been Pwned (no account data is returned); added is when HIBP indexed the breach, which can be long after it happened.",
      "filter": {
        "q": null,
        "days": 90
      },
      "source": "Have I Been Pwned",
      "matches": 27,
      "breaches": [
        {
          "id": "Crunchbase",
          "name": "Crunchbase",
          "added": "2026-10-14",
          "domain": "crunchbase.com",
          "summary": "In January 2026, the private company intelligence platform Crunchbase was targeted in a ShinyHunters \"pay or leak\" extortion attempt . Data allegedly obtained from the company was subsequently published publicly and included 560k unique email addresses, large…",
          "accounts": 559908,
          "verified": true,
          "sensitive": false,
          "breach_date": "2026-01-22",
          "data_exposed": [
            "Email addresses",
            "Employers",
            "Job titles",
            "Names",
            "Phone numbers",
            "Physical addresses",
            "Social media profiles"
          ],
          "passwords_exposed": false
        },
        {
          "id": "Sharecare",
          "name": "Sharecare",
          "added": "2026-10-12",
          "domain": "sharecare.com",
          "summary": "In August 2026, the digital health company Sharecare was the target of a ShinyHunters \"pay or leak\" extortion campaign . The group subsequently published data it claimed was taken from Sharecare's systems, containing 318k unique email addresses. Most of the d…",
          "accounts": 318185,
          "verified": true,
          "sensitive": false,
          "breach_date": "2026-08-12",
          "data_exposed": [
            "Dates of birth",
            "Email addresses",
            "Employers",
            "Genders",
            "Government issued IDs",
            "Job titles",
            "Marital statuses",
            "Names",
            "Phone numbers",
            "Physical addresses"
          ],
          "passwords_exposed": false
        },
        {
          "id": "Neogen",
          "name": "Neogen",
          "added": "2026-10-09",
          "domain": "neogen.com",
          "summary": "In August 2026, the food and animal safety organisation Neogen was the target of a ShinyHunters \"pay or leak\" extortion attempt . The group later published data it claimed had been obtained from Neogen. The data consisted largely of corporate contact records …",
          "accounts": 435963,
          "verified": true,
          "sensitive": false,
          "breach_date": "2026-08-29",
          "data_exposed": [
            "Email addresses",
            "Employers",
            "Job titles",
            "Names",
            "Phone numbers",
            "Physical addresses",
            "Salutations"
          ],
          "passwords_exposed": false
        },
        {
          "id": "CyrusOne",
          "name": "CyrusOne",
          "added": "2026-10-07",
          "domain": "cyrusone.com",
          "summary": "In August 2026, data centre operator CyrusOne was the target of a ShinyHunters \"pay or leak\" extortion attempt . The group subsequently published data allegedly obtained from the company, which included 373k unique email addresses across records relating to u…",
          "accounts": 373460,
          "verified": true,
          "sensitive": false,
          "breach_date": "2026-08-05",
          "data_exposed": [
            "Email addresses",
            "Employers",
            "Job titles",
            "Names",
            "Phone numbers",
            "Physical addresses",
            "Support tickets"
          ],
          "passwords_exposed": false
        },
        {
          "id": "DoubleCounter",
          "name": "Double Counter",
          "added": "2026-10-07",
          "domain": "doublecounter.gg",
          "summary": "In October 2026, the Discord server protection service Double Counter suffered a data breach attributed to a vulnerability in the Metabase analytics tool . In its disclosure notice, Double Counter advised that attackers gained access to a subset of its data. …",
          "accounts": 274922,
          "verified": true,
          "sensitive": false,
          "breach_date": "2026-10-04",
          "data_exposed": [
            "Email addresses",
            "Geographic locations",
            "Names",
            "Usernames"
          ],
          "passwords_exposed": false
        }
      ],
      "total_accounts_in_matches": 160865044,
      "total_breaches_in_database": 1045
    },
    "license": "LicenseRef-Saylor-Agent-Use-1.0",
    "mimeType": "application/json",
    "freshness": "fetched live (cached up to 1 hour for large reference files)",
    "tokenCount": null,
    "inputSchema": {
      "q": "optional name or domain filter",
      "days": "optional only breaches added in the last N days",
      "limit": "optional 1-30, default 10"
    },
    "serviceName": "Saylor Innovations Data Desk",
    "instructions": "STANDARD PATH (works with stock x402 clients): send payload.transaction — a base64 partially-signed Solana transaction — and we route verify/settle through an x402 facilitator that sponsors the fee and submits it. Include the chosen accepts entry as \"accepted\" so we can match terms. ALTERNATIVE PATH (no facilitator): Pick ONE entry from accepts and use the reference and session from THAT entry — each asset has its own. USDC or USDT: send an SPL transfer of the exact amount. Native SOL (asset=So11111111111111111111111111111111111111112, extra.native=true): send that many lamports with a system transfer. Either way include extra.reference as a read-only account (Solana Pay style), then retry with PAYMENT-SIGNATURE: base64({x402Version:2, payload:{session, reference}}). If your client cannot attach a reference, send payload.signature instead (USDC only). SOL amounts are quoted live and expire in 120s; stablecoins do not move. The facilitator path verifies and settles in this request. Only the alternative self-submitted Solana path needs retries while the transfer is indexed (typically 3-4 attempts over 10-20s). On that path, a 402 saying \"payment not found on-chain yet\" means keep retrying.",
    "outputSchema": {
      "type": "object",
      "required": [
        "matches",
        "breaches"
      ],
      "properties": {
        "note": {
          "type": "string"
        },
        "filter": {
          "type": "object",
          "properties": {
            "q": {
              "description": "Name filter applied"
            }
          },
          "description": "Filter applied: name search and recency window in days"
        },
        "source": {
          "type": "string"
        },
        "matches": {
          "type": "number"
        },
        "breaches": {
          "type": "array",
          "items": {
            "type": "object",
            "properties": {
              "added": {
                "type": [
                  "string",
                  "null"
                ],
                "description": "Date added to Have I Been Pwned"
              },
              "accounts": {
                "type": [
                  "number",
                  "null"
                ],
                "description": "Accounts affected"
              },
              "verified": {
                "type": [
                  "boolean",
                  "null"
                ],
                "description": "True when the breach is verified"
              },
              "sensitive": {
                "type": [
                  "boolean",
                  "null"
                ],
                "description": "True when the breach is flagged sensitive"
              }
            }
          },
          "description": "Breaches with name, domain, breach date, accounts affected, data classes exposed and verification flags"
        },
        "total_accounts_in_matches": {
          "type": "number"
        },
        "total_breaches_in_database": {
          "type": "number"
        }
      }
    },
    "noPathTemplate": true,
    "settlementModes": [
      "facilitator-transaction",
      "self-submitted-reference"
    ],
    "typicalLatencyMs": 700
  },
  "x402Version": 2
}

Accepts

The payment requirements as published to the catalog. Read the live 402 before paying — a price here is a claim, not a quote.

[
  {
    "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
    "extra": {
      "memo": "saylor:datadesk:hibp-recent-brea",
      "name": "USD Coin",
      "note": "Base settles through an x402 facilitator. Send payload.signature and payload.authorization (EIP-3009); there is no self-submitted path on this network.",
      "version": "2",
      "facilitatorOnly": true,
      "assetTransferMethod": "eip3009"
    },
    "payTo": "0xA2A8dF0f7CaaBEa4e120a2568118f141569fc8aa",
    "amount": "10000",
    "scheme": "exact",
    "network": "eip155:8453",
    "maxTimeoutSeconds": 120
  },
  {
    "asset": "0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359",
    "extra": {
      "memo": "saylor:datadesk:hibp-recent-brea",
      "name": "USD Coin",
      "note": "Polygon settles through an x402 facilitator. Send payload.signature and payload.authorization (EIP-3009); there is no self-submitted path on this network.",
      "version": "2",
      "facilitatorOnly": true,
      "assetTransferMethod": "eip3009"
    },
    "payTo": "0xA2A8dF0f7CaaBEa4e120a2568118f141569fc8aa",
    "amount": "10000",
    "scheme": "exact",
    "network": "eip155:137",
    "maxTimeoutSeconds": 120
  },
  {
    "asset": "0xaf88d065e77c8cC2239327C5EDb3A432268e5831",
    "extra": {
      "memo": "saylor:datadesk:hibp-recent-brea",
      "name": "USD Coin",
      "note": "Arbitrum settles through an x402 facilitator. Send payload.signature and payload.authorization (EIP-3009); there is no self-submitted path on this network.",
      "version": "2",
      "facilitatorOnly": true,
      "assetTransferMethod": "eip3009"
    },
    "payTo": "0xA2A8dF0f7CaaBEa4e120a2568118f141569fc8aa",
    "amount": "10000",
    "scheme": "exact",
    "network": "eip155:42161",
    "maxTimeoutSeconds": 120
  },
  {
    "asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
    "extra": {
      "memo": "saylor:datadesk:hibp-recent-brea",
      "session": "eyJhcnRpY2xlSWQiOiJkYXRhZGVzazpoaWJwLXJlY2VudC1icmVhY2hlcyIsInJlZmVyZW5jZSI6IjhSdkxodUE5SFVwSnFXUFhEcGVoelFjU0JBdTlvM3lWdDc3cTh5ekRicDlIIiwicmVjaXBpZW50IjoiN0xTamZySmY4Zk5zQjhWQTl1N04zV0VuMjVzbVFMcG9iM1N2eVV2WGFjeTciLCJtaW50IjoiRVBqRldkZDVBdWZxU1NxZU0ycU4xeHp5YmFwQzhHNHdFR0drWnd5VER0MXYiLCJtaW5BbW91bnQiOjEwMDAwLCJleHAiOjE3OTI0MTUwNjcxMTd9.tVMj32qrUOzrwZdKF1U9TKuMnN1BBUBfkyL1khShovc",
      "feePayer": "BFK9TLC3edb13K6v4YyH3DwPb5DSUpkWvb7XnqCL9b4F",
      "reference": "8RvLhuA9HUpJqWPXDpehzQcSBAu9o3yVt77q8yzDbp9H"
    },
    "payTo": "7LSjfrJf8fNsB8VA9u7N3WEn25smQLpob3SvyUvXacy7",
    "amount": "10000",
    "scheme": "exact",
    "network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
    "maxTimeoutSeconds": 120
  },
  {
    "asset": "Es9vMFrzaCERmJfrF4H2FYD4KCoNkY11McCe8BenwNYB",
    "extra": {
      "memo": "saylor:datadesk:hibp-recent-brea",
      "session": "eyJhcnRpY2xlSWQiOiJkYXRhZGVzazpoaWJwLXJlY2VudC1icmVhY2hlcyIsInJlZmVyZW5jZSI6IkdoWm54ZTlwZmt0bzVoOXdGeGl6cTF5QVc1R2E2djhvRnBHNGF4N0VGV0xhIiwicmVjaXBpZW50IjoiN0xTamZySmY4Zk5zQjhWQTl1N04zV0VuMjVzbVFMcG9iM1N2eVV2WGFjeTciLCJtaW50IjoiRXM5dk1GcnphQ0VSbUpmckY0SDJGWUQ0S0NvTmtZMTFNY0NlOEJlbndOWUIiLCJtaW5BbW91bnQiOjEwMDAwLCJleHAiOjE3OTI0MTUwNjcxMTd9.7j3yUkA4tzpZFs_tyvAOrTCo4Ms7fyv2SlYZ8NBlU98",
      "feePayer": "BFK9TLC3edb13K6v4YyH3DwPb5DSUpkWvb7XnqCL9b4F",
      "reference": "GhZnxe9pfkto5h9wFxizq1yAW5Ga6v8oFpG4ax7EFWLa"
    },
    "payTo": "7LSjfrJf8fNsB8VA9u7N3WEn25smQLpob3SvyUvXacy7",
    "amount": "10000",
    "scheme": "exact",
    "network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
    "maxTimeoutSeconds": 120
  },
  {
    "asset": "So11111111111111111111111111111111111111112",
    "extra": {
      "memo": "saylor:datadesk:hibp-recent-brea",
      "note": "Native SOL: send lamports with a system transfer, not an SPL transfer. Price is quoted live and this quote expires in 120s.",
      "native": true,
      "session": "eyJhcnRpY2xlSWQiOiJkYXRhZGVzazpoaWJwLXJlY2VudC1icmVhY2hlcyIsInJlZmVyZW5jZSI6IjhneWgyTUR1RzJGVkpBVEVGUm9aVkxyUjZnYkVlQzlMWEtvUnlOSmdDOHdFIiwicmVjaXBpZW50IjoiN0xTamZySmY4Zk5zQjhWQTl1N04zV0VuMjVzbVFMcG9iM1N2eVV2WGFjeTciLCJtaW50IjpudWxsLCJtaW5BbW91bnQiOjkyMjQwLCJleHAiOjE3OTI0MTUwNjcxMTd9.wzzhmm6BS0QdLR3oFgcTrP7lpErmKs7MpQH98anypeg",
      "reference": "8gyh2MDuG2FVJATEFRoZVLrR6gbEeC9LXKoRyNJgC8wE",
      "solUsdPrice": 105.16,
      "quotedLamports": "95093"
    },
    "payTo": "7LSjfrJf8fNsB8VA9u7N3WEn25smQLpob3SvyUvXacy7",
    "amount": "92240",
    "scheme": "exact",
    "network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
    "maxTimeoutSeconds": 120
  }
]

Extensions

{
  "bazaar": {
    "info": {
      "input": {
        "type": "http",
        "method": "GET",
        "queryParams": {
          "days": "90",
          "limit": "5"
        }
      },
      "output": {
        "type": "json",
        "example": {
          "note": "Public breach catalogue from Have I Been Pwned (no account data is returned); added is when HIBP indexed the breach, which can be long after it happened.",
          "filter": {
            "q": null,
            "days": 90
          },
          "source": "Have I Been Pwned",
          "matches": 27,
          "breaches": [
            {
              "id": "Crunchbase",
              "name": "Crunchbase",
              "added": "2026-10-14",
              "domain": "crunchbase.com",
              "summary": "In January 2026, the private company intelligence platform Crunchbase was targeted in a ShinyHunters \"pay or leak\" extortion attempt . Data allegedly obtained from the company was subsequently published publicly and included 560k unique email addresses, large…",
              "accounts": 559908,
              "verified": true,
              "sensitive": false,
              "breach_date": "2026-01-22",
              "data_exposed": [
                "Email addresses",
                "Employers",
                "Job titles",
                "Names",
                "Phone numbers",
                "Physical addresses",
                "Social media profiles"
              ],
              "passwords_exposed": false
            },
            {
              "id": "Sharecare",
              "name": "Sharecare",
              "added": "2026-10-12",
              "domain": "sharecare.com",
              "summary": "In August 2026, the digital health company Sharecare was the target of a ShinyHunters \"pay or leak\" extortion campaign . The group subsequently published data it claimed was taken from Sharecare's systems, containing 318k unique email addresses. Most of the d…",
              "accounts": 318185,
              "verified": true,
              "sensitive": false,
              "breach_date": "2026-08-12",
              "data_exposed": [
                "Dates of birth",
                "Email addresses",
                "Employers",
                "Genders",
                "Government issued IDs",
                "Job titles",
                "Marital statuses",
                "Names",
                "Phone numbers",
                "Physical addresses"
              ],
              "passwords_exposed": false
            },
            {
              "id": "Neogen",
              "name": "Neogen",
              "added": "2026-10-09",
              "domain": "neogen.com",
              "summary": "In August 2026, the food and animal safety organisation Neogen was the target of a ShinyHunters \"pay or leak\" extortion attempt . The group later published data it claimed had been obtained from Neogen. The data consisted largely of corporate contact records …",
              "accounts": 435963,
              "verified": true,
              "sensitive": false,
              "breach_date": "2026-08-29",
              "data_exposed": [
                "Email addresses",
                "Employers",
                "Job titles",
                "Names",
                "Phone numbers",
                "Physical addresses",
                "Salutations"
              ],
              "passwords_exposed": false
            },
            {
              "id": "CyrusOne",
              "name": "CyrusOne",
              "added": "2026-10-07",
              "domain": "cyrusone.com",
              "summary": "In August 2026, data centre operator CyrusOne was the target of a ShinyHunters \"pay or leak\" extortion attempt . The group subsequently published data allegedly obtained from the company, which included 373k unique email addresses across records relating to u…",
              "accounts": 373460,
              "verified": true,
              "sensitive": false,
              "breach_date": "2026-08-05",
              "data_exposed": [
                "Email addresses",
                "Employers",
                "Job titles",
                "Names",
                "Phone numbers",
                "Physical addresses",
                "Support tickets"
              ],
              "passwords_exposed": false
            },
            {
              "id": "DoubleCounter",
              "name": "Double Counter",
              "added": "2026-10-07",
              "domain": "doublecounter.gg",
              "summary": "In October 2026, the Discord server protection service Double Counter suffered a data breach attributed to a vulnerability in the Metabase analytics tool . In its disclosure notice, Double Counter advised that attackers gained access to a subset of its data. …",
              "accounts": 274922,
              "verified": true,
              "sensitive": false,
              "breach_date": "2026-10-04",
              "data_exposed": [
                "Email addresses",
                "Geographic locations",
                "Names",
                "Usernames"
              ],
              "passwords_exposed": false
            }
          ],
          "total_accounts_in_matches": 160865044,
          "total_breaches_in_database": 1045
        }
      }
    },
    "schema": {
      "type": "object",
      "$schema": "https://json-schema.org/draft/2020-12/schema",
      "required": [
        "input"
      ],
      "properties": {
        "input": {
          "type": "object",
          "required": [
            "type",
            "method"
          ],
          "properties": {
            "type": {
              "type": "string",
              "const": "http"
            },
            "method": {
              "enum": [
                "GET"
              ],
              "type": "string"
            },
            "queryParams": {
              "type": "object",
              "properties": {
                "days": {
                  "type": "string",
                  "description": "optional only breaches added in the last N days"
                },
                "limit": {
                  "type": "string",
                  "description": "optional 1-30, default 10"
                }
              }
            }
          },
          "additionalProperties": false
        },
        "output": {
          "type": "object",
          "required": [
            "type"
          ],
          "properties": {
            "type": {
              "type": "string",
              "const": "json"
            },
            "example": {
              "type": "object",
              "required": [
                "matches",
                "breaches"
              ],
              "properties": {
                "note": {
                  "type": "string",
                  "description": "Caveat or context for reading the result"
                },
                "filter": {
                  "type": "object",
                  "properties": {
                    "q": {
                      "description": "Name filter applied"
                    },
                    "days": {
                      "type": [
                        "number",
                        "null"
                      ],
                      "description": "Number of days"
                    }
                  },
                  "description": "Filter applied: name search and recency window in days"
                },
                "source": {
                  "type": "string",
                  "description": "Data source the values come from"
                },
                "matches": {
                  "type": "number",
                  "description": "Matching items"
                },
                "breaches": {
                  "type": "array",
                  "items": {
                    "type": "object",
                    "properties": {
                      "id": {
                        "description": "Identifier of the record"
                      },
                      "name": {
                        "description": "Name"
                      },
                      "added": {
                        "type": [
                          "string",
                          "null"
                        ],
                        "description": "Date added to Have I Been Pwned"
                      },
                      "domain": {
                        "description": "Domain name"
                      },
                      "summary": {
                        "description": "Short summary"
                      },
                      "accounts": {
                        "type": [
                          "number",
                          "null"
                        ],
                        "description": "Accounts affected"
                      },
                      "verified": {
                        "type": [
                          "boolean",
                          "null"
                        ],
                        "description": "True when the breach is verified"
                      },
                      "sensitive": {
                        "type": [
                          "boolean",
                          "null"
                        ],
                        "description": "True when the breach is flagged sensitive"
                      },
                      "breach_date": {
                        "description": "Breach date"
                      },
                      "data_exposed": {
                        "description": "Data exposed"
                      },
                      "passwords_exposed": {
                        "description": "Passwords exposed"
                      }
                    }
                  },
                  "description": "Breaches with name, domain, breach date, accounts affected, data classes exposed and verification flags"
                },
                "total_accounts_in_matches": {
                  "type": "number",
                  "description": "Total accounts in matches"
                },
                "total_breaches_in_database": {
                  "type": "number",
                  "description": "Total breaches in database"
                }
              }
            }
          }
        }
      }
    }
  }
}

Provenance

Seen in the source catalog

2026-10-19 13:02Z

Last indexed by Roundhouse

2026-10-26 17:40Z

Last enriched (probe, favicon, geo)

2026-10-17 17:45Z

x402 version

2

Max timeout

120s

Liveness probe

HTTP 402