CybersecurityReporting

Breach Reporting

Show users exactly which breaches exposed them, when it happened, and what data leaked.

Start with 500 free creditsDocumentation

Email breaches · 1 credit per lookup · no monthly fee

DataCo · 2024

Exposed: emails · passwords

ShopLeak · 2022

Exposed: emails · phones

The problem

'Your data may have been compromised' is the least useful sentence in security. Users need specifics to act: which account, what leaked, how bad, and what to do about it.

With Encrata

The breach response includes every service by name, the breach date, and exactly which data classes leaked. Render it as a timeline in your product and users see their real exposure history, specific enough to know which passwords to rotate and which accounts to close.

How it works

1

Send the address

Call the breach endpoint with an email address, one-off for a signup check, or on a schedule for monitoring.

2

We check known breaches

Encrata searches disclosed breach data and returns every breach the address appears in, when it happened, and what leaked.

3

Respond to exposure

Alert the user, raise a risk score, force a reset or require MFA, the full breach history is one credit away.

One call, structured answer

Breach Reporting runs on the email breaches lookup at 1 credit per lookup. Same API key, same JSON shape as every other Encrata lookup.

  • Full breach history, names, dates and exposed data classes per breach
  • 1 credit per check, so continuous monitoring stays affordable
  • New-breach detection turns a public leak into a same-day security response
  • Works for one address or your whole domain
Terminal
curl -X POST "https://encrata.com/api/agent/breaches" \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"email": "sam@corp.com"}'
response.json
{
  "email": "sam@corp.com",
  "breached": true,
  "breach_info": {
    "breach_count": 2,
    "services": [
      { "name": "LinkedIn", "breach_date": "2012-05-05",
        "data_types": ["Email addresses", "Passwords"] }
    ],
    "exposed_data": ["Email addresses", "Passwords"]
  },
  "credits": 1
}

Render the response as product UI

Render the breach_info response directly as product UI: a timeline of services, dates and exposed data classes per breach. The aggregated exposed_data array powers a summary view, 'passwords exposed in 3 of 5 breaches', while per-service detail answers the follow-up questions. One check per report keeps the unit economics simple.

Specifics change behavior

Good breach reporting changes user behavior where generic warnings don't: someone who sees 'LinkedIn, 2012, passwords' next to 'Adobe, 2013, passwords' understands credential reuse viscerally and rotates the shared password. It's also a conversion surface, free breach reports are one of the highest-intent lead magnets in consumer security.

More email breaches use cases

View all

New breach: DataCo

Your email was exposed · just now

Secure account

Breach Alerts

Warn users the moment their email address shows up in a newly disclosed data breach

CybersecurityMonitoring

Identity risk

78/100
4 prior breaches · manual review

Risk Scoring

Raise risk scores for identities with prior breach exposure before approving transactions

FintechRisk
Breach affects 3 users
Password resets sent

Password Reset

Trigger targeted password resets when a breach relevant to your users becomes public

SaaSSecurity
Start with 500 free credits
$curl https://encrata.com/api/agent/lookup -H "Authorization: Bearer YOUR_API_KEY" -d '{"e": "satya@microsoft.com"}'