{
  "info": {
    "_postman_id": "81b4b888-9115-4a86-9d90-ad75bd758a2e",
    "name": "Have I Been Pwned API v3 Breached Accounts Breaches API",
    "description": "The Have I Been Pwned (HIBP) API allows the list of pwned accounts (email addresses, domains,\npasswords, and stealer log entries) to be quickly searched via REST. Authenticated endpoints\nrequire an `hibp-api-key` header. All requests must send a `user-agent` header that accurately\nidentifies the consuming application. Subscriptions range from Pwned 1 to Pwned 5.\n\n\nContact Support:\n Name: Have I Been Pwned",
    "schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json",
    "createdAt": "2026-07-28T01:53:20.000Z",
    "updatedAt": "2026-07-28T01:53:20.000Z",
    "lastUpdatedBy": "35240",
    "uid": "35240-81b4b888-9115-4a86-9d90-ad75bd758a2e"
  },
  "item": [
    {
      "name": "breaches",
      "item": [
        {
          "name": "Get All Breaches In The System",
          "id": "9181806b-e976-4a51-940e-a55759446825",
          "protocolProfileBehavior": {
            "disableBodyPruning": true
          },
          "request": {
            "method": "GET",
            "header": [
              {
                "key": "Accept",
                "value": "application/json"
              }
            ],
            "url": {
              "raw": "{{baseUrl}}/breaches?Domain=<string>&IsSpamList=<boolean>",
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "breaches"
              ],
              "query": [
                {
                  "description": "Filter the response to breaches against the supplied domain.",
                  "key": "Domain",
                  "value": "<string>"
                },
                {
                  "description": "Filter to spam-list breaches only when true.",
                  "key": "IsSpamList",
                  "value": "<boolean>"
                }
              ]
            },
            "description": "Returns the complete corpus of breaches currently in HIBP."
          },
          "response": [
            {
              "id": "491c492a-1eeb-4a66-9a07-9fbe135bc26e",
              "name": "All breaches matching the filters.",
              "originalRequest": {
                "method": "GET",
                "header": [
                  {
                    "key": "Accept",
                    "value": "application/json"
                  },
                  {
                    "description": "Added as a part of security scheme: apikey",
                    "key": "hibp-api-key",
                    "value": "<API Key>"
                  }
                ],
                "url": {
                  "raw": "{{baseUrl}}/breaches?Domain=<string>&IsSpamList=<boolean>",
                  "host": [
                    "{{baseUrl}}"
                  ],
                  "path": [
                    "breaches"
                  ],
                  "query": [
                    {
                      "description": "Filter the response to breaches against the supplied domain.",
                      "key": "Domain",
                      "value": "<string>"
                    },
                    {
                      "description": "Filter to spam-list breaches only when true.",
                      "key": "IsSpamList",
                      "value": "<boolean>"
                    }
                  ]
                }
              },
              "status": "OK",
              "code": 200,
              "_postman_previewlanguage": "json",
              "header": [
                {
                  "key": "Content-Type",
                  "value": "application/json"
                }
              ],
              "cookie": [],
              "responseTime": null,
              "body": "[\n  {\n    \"Name\": \"<string>\",\n    \"Title\": \"<string>\",\n    \"Domain\": \"<string>\",\n    \"BreachDate\": \"<date>\",\n    \"AddedDate\": \"<dateTime>\",\n    \"ModifiedDate\": \"<dateTime>\",\n    \"PwnCount\": \"<integer>\",\n    \"Description\": \"<string>\",\n    \"DataClasses\": [\n      \"<string>\",\n      \"<string>\"\n    ],\n    \"IsVerified\": \"<boolean>\",\n    \"IsFabricated\": \"<boolean>\",\n    \"IsSensitive\": \"<boolean>\",\n    \"IsRetired\": \"<boolean>\",\n    \"IsSpamList\": \"<boolean>\",\n    \"IsMalware\": \"<boolean>\",\n    \"IsStealerLog\": \"<boolean>\",\n    \"IsSubscriptionFree\": \"<boolean>\",\n    \"LogoPath\": \"<uri>\",\n    \"Attribution\": \"<string>\"\n  },\n  {\n    \"Name\": \"<string>\",\n    \"Title\": \"<string>\",\n    \"Domain\": \"<string>\",\n    \"BreachDate\": \"<date>\",\n    \"AddedDate\": \"<dateTime>\",\n    \"ModifiedDate\": \"<dateTime>\",\n    \"PwnCount\": \"<integer>\",\n    \"Description\": \"<string>\",\n    \"DataClasses\": [\n      \"<string>\",\n      \"<string>\"\n    ],\n    \"IsVerified\": \"<boolean>\",\n    \"IsFabricated\": \"<boolean>\",\n    \"IsSensitive\": \"<boolean>\",\n    \"IsRetired\": \"<boolean>\",\n    \"IsSpamList\": \"<boolean>\",\n    \"IsMalware\": \"<boolean>\",\n    \"IsStealerLog\": \"<boolean>\",\n    \"IsSubscriptionFree\": \"<boolean>\",\n    \"LogoPath\": \"<uri>\",\n    \"Attribution\": \"<string>\"\n  }\n]",
              "createdAt": "2026-07-28T01:53:20.000Z",
              "updatedAt": "2026-07-28T01:53:20.000Z",
              "uid": "35240-491c492a-1eeb-4a66-9a07-9fbe135bc26e"
            }
          ],
          "createdAt": "2026-07-28T01:53:20.000Z",
          "updatedAt": "2026-07-28T01:53:20.000Z",
          "uid": "35240-9181806b-e976-4a51-940e-a55759446825"
        }
      ],
      "id": "d953e7f6-d52c-4612-be11-cb8a302dc671",
      "createdAt": "2026-07-28T01:53:20.000Z",
      "updatedAt": "2026-07-28T01:53:20.000Z",
      "uid": "35240-d953e7f6-d52c-4612-be11-cb8a302dc671"
    },
    {
      "name": "breach",
      "item": [
        {
          "name": "{name}",
          "item": [
            {
              "name": "Get A Single Breach By Name",
              "id": "c17f2a9f-c644-414b-bf0c-ceab6455bdc4",
              "protocolProfileBehavior": {
                "disableBodyPruning": true
              },
              "request": {
                "method": "GET",
                "header": [
                  {
                    "key": "Accept",
                    "value": "application/json"
                  }
                ],
                "url": {
                  "raw": "{{baseUrl}}/breach/:name",
                  "host": [
                    "{{baseUrl}}"
                  ],
                  "path": [
                    "breach",
                    ":name"
                  ],
                  "variable": [
                    {
                      "id": "53e40ab4-723f-4433-b3d3-1009e3e555d7",
                      "key": "name",
                      "value": "<string>",
                      "description": "(Required) Pascal-cased stable name of the breach (e.g. `Adobe`)."
                    }
                  ]
                },
                "description": "Returns the metadata for a single breach identified by its stable Pascal-cased name."
              },
              "response": [
                {
                  "id": "5cd6c8d7-1156-4db2-8aea-89d3b01102d3",
                  "name": "The breach record.",
                  "originalRequest": {
                    "method": "GET",
                    "header": [
                      {
                        "key": "Accept",
                        "value": "application/json"
                      },
                      {
                        "description": "Added as a part of security scheme: apikey",
                        "key": "hibp-api-key",
                        "value": "<API Key>"
                      }
                    ],
                    "url": {
                      "raw": "{{baseUrl}}/breach/:name",
                      "host": [
                        "{{baseUrl}}"
                      ],
                      "path": [
                        "breach",
                        ":name"
                      ],
                      "variable": [
                        {
                          "key": "name"
                        }
                      ]
                    }
                  },
                  "status": "OK",
                  "code": 200,
                  "_postman_previewlanguage": "json",
                  "header": [
                    {
                      "key": "Content-Type",
                      "value": "application/json"
                    }
                  ],
                  "cookie": [],
                  "responseTime": null,
                  "body": "{\n  \"Name\": \"<string>\",\n  \"Title\": \"<string>\",\n  \"Domain\": \"<string>\",\n  \"BreachDate\": \"<date>\",\n  \"AddedDate\": \"<dateTime>\",\n  \"ModifiedDate\": \"<dateTime>\",\n  \"PwnCount\": \"<integer>\",\n  \"Description\": \"<string>\",\n  \"DataClasses\": [\n    \"<string>\",\n    \"<string>\"\n  ],\n  \"IsVerified\": \"<boolean>\",\n  \"IsFabricated\": \"<boolean>\",\n  \"IsSensitive\": \"<boolean>\",\n  \"IsRetired\": \"<boolean>\",\n  \"IsSpamList\": \"<boolean>\",\n  \"IsMalware\": \"<boolean>\",\n  \"IsStealerLog\": \"<boolean>\",\n  \"IsSubscriptionFree\": \"<boolean>\",\n  \"LogoPath\": \"<uri>\",\n  \"Attribution\": \"<string>\"\n}",
                  "createdAt": "2026-07-28T01:53:20.000Z",
                  "updatedAt": "2026-07-28T01:53:20.000Z",
                  "uid": "35240-5cd6c8d7-1156-4db2-8aea-89d3b01102d3"
                },
                {
                  "id": "1caaa684-c9df-4d49-bfb1-6f7d493db2aa",
                  "name": "No record matched the supplied identifier.",
                  "originalRequest": {
                    "method": "GET",
                    "header": [
                      {
                        "description": "Added as a part of security scheme: apikey",
                        "key": "hibp-api-key",
                        "value": "<API Key>"
                      }
                    ],
                    "url": {
                      "raw": "{{baseUrl}}/breach/:name",
                      "host": [
                        "{{baseUrl}}"
                      ],
                      "path": [
                        "breach",
                        ":name"
                      ],
                      "variable": [
                        {
                          "key": "name"
                        }
                      ]
                    }
                  },
                  "status": "Not Found",
                  "code": 404,
                  "_postman_previewlanguage": "text",
                  "header": [],
                  "cookie": [],
                  "responseTime": null,
                  "body": null,
                  "createdAt": "2026-07-28T01:53:20.000Z",
                  "updatedAt": "2026-07-28T01:53:20.000Z",
                  "uid": "35240-1caaa684-c9df-4d49-bfb1-6f7d493db2aa"
                }
              ],
              "createdAt": "2026-07-28T01:53:20.000Z",
              "updatedAt": "2026-07-28T01:53:20.000Z",
              "uid": "35240-c17f2a9f-c644-414b-bf0c-ceab6455bdc4"
            }
          ],
          "id": "a48c137b-8a6f-41d9-b4c0-31a3773e842a",
          "createdAt": "2026-07-28T01:53:20.000Z",
          "updatedAt": "2026-07-28T01:53:20.000Z",
          "uid": "35240-a48c137b-8a6f-41d9-b4c0-31a3773e842a"
        }
      ],
      "id": "9d320962-4092-42d9-b5e4-93f08a8494fb",
      "createdAt": "2026-07-28T01:53:20.000Z",
      "updatedAt": "2026-07-28T01:53:20.000Z",
      "uid": "35240-9d320962-4092-42d9-b5e4-93f08a8494fb"
    },
    {
      "name": "latestbreach",
      "item": [
        {
          "name": "Get The Most Recently Added Breach",
          "id": "c3c5330c-0f37-4f22-849d-fa64b437462e",
          "protocolProfileBehavior": {
            "disableBodyPruning": true
          },
          "request": {
            "method": "GET",
            "header": [
              {
                "key": "Accept",
                "value": "application/json"
              }
            ],
            "url": {
              "raw": "{{baseUrl}}/latestbreach",
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "latestbreach"
              ]
            },
            "description": "Returns the breach most recently added to HIBP."
          },
          "response": [
            {
              "id": "6c5c35b0-1f88-416a-b1c4-0c9fcd7cccb8",
              "name": "The most recently added breach.",
              "originalRequest": {
                "method": "GET",
                "header": [
                  {
                    "key": "Accept",
                    "value": "application/json"
                  },
                  {
                    "description": "Added as a part of security scheme: apikey",
                    "key": "hibp-api-key",
                    "value": "<API Key>"
                  }
                ],
                "url": {
                  "raw": "{{baseUrl}}/latestbreach",
                  "host": [
                    "{{baseUrl}}"
                  ],
                  "path": [
                    "latestbreach"
                  ]
                }
              },
              "status": "OK",
              "code": 200,
              "_postman_previewlanguage": "json",
              "header": [
                {
                  "key": "Content-Type",
                  "value": "application/json"
                }
              ],
              "cookie": [],
              "responseTime": null,
              "body": "{\n  \"Name\": \"<string>\",\n  \"Title\": \"<string>\",\n  \"Domain\": \"<string>\",\n  \"BreachDate\": \"<date>\",\n  \"AddedDate\": \"<dateTime>\",\n  \"ModifiedDate\": \"<dateTime>\",\n  \"PwnCount\": \"<integer>\",\n  \"Description\": \"<string>\",\n  \"DataClasses\": [\n    \"<string>\",\n    \"<string>\"\n  ],\n  \"IsVerified\": \"<boolean>\",\n  \"IsFabricated\": \"<boolean>\",\n  \"IsSensitive\": \"<boolean>\",\n  \"IsRetired\": \"<boolean>\",\n  \"IsSpamList\": \"<boolean>\",\n  \"IsMalware\": \"<boolean>\",\n  \"IsStealerLog\": \"<boolean>\",\n  \"IsSubscriptionFree\": \"<boolean>\",\n  \"LogoPath\": \"<uri>\",\n  \"Attribution\": \"<string>\"\n}",
              "createdAt": "2026-07-28T01:53:20.000Z",
              "updatedAt": "2026-07-28T01:53:20.000Z",
              "uid": "35240-6c5c35b0-1f88-416a-b1c4-0c9fcd7cccb8"
            }
          ],
          "createdAt": "2026-07-28T01:53:20.000Z",
          "updatedAt": "2026-07-28T01:53:20.000Z",
          "uid": "35240-c3c5330c-0f37-4f22-849d-fa64b437462e"
        }
      ],
      "id": "f2fea244-bbfa-4abc-a7da-843c4393637c",
      "createdAt": "2026-07-28T01:53:20.000Z",
      "updatedAt": "2026-07-28T01:53:20.000Z",
      "uid": "35240-f2fea244-bbfa-4abc-a7da-843c4393637c"
    }
  ],
  "auth": {
    "type": "apikey",
    "apikey": [
      {
        "key": "key",
        "value": "hibp-api-key",
        "type": "string"
      },
      {
        "key": "value",
        "value": "{{apiKey}}",
        "type": "string"
      },
      {
        "key": "in",
        "value": "header",
        "type": "string"
      }
    ]
  },
  "variable": [
    {
      "key": "baseUrl",
      "value": "https://haveibeenpwned.com/api/v3"
    }
  ]
}