# Have I Been Pwned API: Search breaches

> Finds recorded data breaches whose title or website domain matches a company or website name, newest first.

Unofficial. Not affiliated with or endorsed by Have I Been Pwned.

- Page: https://fous.com/methods/haveibeenpwned.com/search-breaches
- Method: `haveibeenpwned.com/search_breaches`, version 1
- Website: haveibeenpwned.com
- Returns: breach name, website, breach date, date added, accounts affected, data exposed, verified flag, description, breach page link
- Effect: read (it gets data and changes nothing)
- Sign-in: none needed
- Cost: 1 credit per completed run (1¢ with pay as you go); failed runs are free
- Verified: Nov 2, 2026

## Inputs

| Field | Type | Required | In the run below | Description |
|---|---|---|---|---|
| `company` | string | yes | `"Adobe"` | Company or website to search for, for example Adobe or adobe.com. |
| `max_results` | integer | no |  | Most breaches to return, for example 20 (maximum 100). Default 20. |

## Output

From a run on Oct 23, 2026, shortened. Its input:

```json
{
  "company": "Adobe"
}
```

Its output:

```json
{
  "breaches": [
    {
      "website": "adobe.com",
      "verified": "yes",
      "date_added": "2013-12-04",
      "breach_date": "2013-10-04",
      "breach_name": "Adobe",
      "description": "In October 2013, 153 million Adobe accounts were breached with each containing an internal ID, username, email, encrypted password and a password hint in plain text. The password cryptography was poorly done and many were quickly resolved back to plain text. The unencrypted hints also disclosed much…",
      "data_exposed": "Email addresses, Password hints, Passwords, Usernames",
      "breach_page_link": "https://haveibeenpwned.com/Breach/Adobe",
      "accounts_affected": 152445165
    }
  ]
}
```

## Run it

From code, with a Fous API key in `FOUS_API_KEY`; the answer's `data` holds the output:

```bash
curl https://api.fous.com/v1/runs \
  -H "Authorization: Bearer $FOUS_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"method":"haveibeenpwned.com/search_breaches","input":{"company":"Adobe"}}'
```

From an AI agent connected to the Fous MCP server: its `run` with the same method and input. To connect one, give it `set up https://fous.com/SKILL.md`.

## Ask your agent

- Which data breaches have been recorded for Adobe, newest first? Show me up to 10 with dates and accounts affected.
- Find breaches tied to linkedin.com and list the breach name, breach date, and what data was exposed.
- I need a list of recorded breaches matching the company Dropbox, including whether each one is verified and a link to its page.
- Pull up the 25 most recent breaches associated with the domain yahoo.com so I can see how many accounts were affected.
- Has Canva had any data breaches on record? Give me the newest ones with their descriptions.

## Input schema

```json
{
  "type": "object",
  "required": [
    "company"
  ],
  "properties": {
    "company": {
      "type": "string",
      "minLength": 1,
      "description": "Company or website to search for, for example Adobe or adobe.com."
    },
    "max_results": {
      "type": "integer",
      "default": 20,
      "maximum": 100,
      "minimum": 1,
      "description": "Most breaches to return, for example 20 (maximum 100)."
    }
  }
}
```

## Output schema

```json
{
  "type": "object",
  "required": [
    "breaches"
  ],
  "properties": {
    "breaches": {
      "type": "array",
      "items": {
        "type": "object",
        "required": [
          "breach_name",
          "website",
          "breach_date",
          "date_added",
          "accounts_affected",
          "data_exposed",
          "verified",
          "description",
          "breach_page_link"
        ],
        "properties": {
          "website": {
            "type": [
              "string",
              "null"
            ],
            "description": "Affected website domain."
          },
          "verified": {
            "enum": [
              "yes",
              "no"
            ],
            "type": "string",
            "description": "Whether the breach was verified."
          },
          "date_added": {
            "type": [
              "string",
              "null"
            ],
            "format": "date",
            "description": "Date the breach was added."
          },
          "breach_date": {
            "type": [
              "string",
              "null"
            ],
            "format": "date",
            "description": "Date of the breach."
          },
          "breach_name": {
            "type": "string",
            "description": "Name of the breach."
          },
          "description": {
            "type": "string",
            "description": "Plain-text summary of the breach."
          },
          "data_exposed": {
            "type": "string",
            "description": "Kinds of personal data exposed."
          },
          "breach_page_link": {
            "type": "string",
            "format": "uri",
            "description": "Breach page on Have I Been Pwned."
          },
          "accounts_affected": {
            "type": [
              "integer",
              "null"
            ],
            "description": "Number of accounts affected."
          }
        },
        "additionalProperties": false
      },
      "description": "Matching breaches, newest first."
    }
  },
  "additionalProperties": false
}
```

## See more

- [NIST API: Search vulnerabilities](https://fous.com/methods/nvd.nist.gov/search-vulnerabilities.md): Finds known vulnerabilities (CVEs) in the NVD that match a product or vendor name, newest first. Each CVE is flagged when it is in CISA's known exploited catalog.
- [Trustpilot API: Search companies](https://fous.com/methods/trustpilot.com/search-companies.md): Finds companies on Trustpilot by name or what they do, with TrustScore, review count, categories, location, logo and links. A preferred country moves companies listed in that country to the front.
- [Companies House API: Search companies](https://fous.com/methods/find-and-update.company-information.service.gov.uk/search-companies.md): Searches the UK Companies House register by company name and returns each company's status, type, incorporation date and registered office address, in result order.
- [CPSC API: Search product recalls](https://fous.com/methods/cpsc.gov/search-recalls.md): Finds U.S. consumer product recalls matching a product type or brand, newest first, with hazards, remedies, incidents, sale details and photos when published.
- [Hacker News API: Search YC companies](https://fous.com/methods/ycombinator.com/search-companies.md): Searches the Y Combinator company directory by keyword, industry, batch, location, hiring and status, returning companies in directory order.
- [Trustpilot API: Get company reviews](https://fous.com/methods/trustpilot.com/get-company-reviews.md): Reads recent public Trustpilot reviews for a company by name, website or Trustpilot link, in every language, with its TrustScore, ratings, reviewer details and company replies. Reviews follow the chosen sort (most recent or most relevant) and star filters, starting from a chosen results page.
- [Companies House API: List company filing history](https://fous.com/methods/find-and-update.company-information.service.gov.uk/list-filing-history.md): Lists a UK company's Companies House filings, newest first, with date, form code, type, description, page count and PDF link. Finds the company by name, company number or Companies House link; a category picks accounts, confirmation statements, officers, address, capital, charges or incorporation filings.
- [Stock Analysis API: List recent IPOs](https://fous.com/methods/stockanalysis.com/list-recent-ipos.md): Lists US IPOs from a chosen year, newest first. Each IPO comes with its IPO price, current price and return since IPO. Coverage begins in 2019.