Retrieve Details for an Exposure
Last updated
Last updated
Returns the detailed information for a credentials exposure. The responses to this call can and should be cached to limit the number of calls made. The exposure details are not typically expected to change over time, so they can be retained for relatively long periods of time, e.g. for up to 30 days.
The response body contains the details of the Exposure
The unique ID of the Exposure.
Title of the exposure – for breaches, the domain of the origin site. For exposures where it’s not possible to determine the origin site, we provide the title as Unknown source and include the date it was found and added to our database in parentheses.
The number of credentials found in the exposure (may be 0 for non-credentials exposures)
The date the exposure occurred, as much as is known. The value is as follows:
A category for the breached organization, if the exposure was a data breach. These categories correspond to the top level of the North American Industry Classification System (NAICS). Some types of data-harvesting malware (i.e. stealers, phishing, etc.) will show up under the Malware category. Large aggregated dumps of user credentials from various sources (called Combo Lists) will show up under the category Combolists.
Possible values (NAICS value):
Where the data was collected at. Possible values are:
The format of the passwords in the Exposure, e.g. “Cleartext”, “MD5”, “BCrypt”, etc.
The types of user data which were present in the Exposure, e.g. “Emails”, “Passwords”, “Physical Addresses”, “Phone Numbers”, etc.
The date the Exposure was found and added to the Enzoic database.
An array of URLs the data was found at. Only present for some types of Exposures, like when the source was a paste site.
The number of unique email address domains in this Exposure. So, for instance, if the Exposure only contained “gmail.com” and “yahoo.com” email addresses, this number would be 2.
The number of different files there were found in this Exposure.