curl -X GET "<base_url>/dpp/dwm/v2/breach/catalog" \
-H "X-AccessToken: YOUR_ACCESS_TOKEN"
{
"header": {
"message": "Success",
"response_code": 1
},
"body": {
"page": 1,
"limit": 50,
"results": [
{
"breachMainCategory": "malware",
"numRecords": 93604,
"title": "Breach Name",
"type": "PRIVATE",
"uuid": "string",
"shortTitle": "Breach Name",
"id": 178840,
"breachCategory": "infostealer",
"publishDate": "2026-06-16T19:35:35Z"
}
]
}
}
Breach Catalog
List All Breach Metadata
Returns a paginated catalog of the data breaches and infostealer/malware sources tracked in the dark-web breach dataset.
GET
/
dpp
/
dwm
/
v2
/
breach
/
catalog
curl -X GET "<base_url>/dpp/dwm/v2/breach/catalog" \
-H "X-AccessToken: YOUR_ACCESS_TOKEN"
{
"header": {
"message": "Success",
"response_code": 1
},
"body": {
"page": 1,
"limit": 50,
"results": [
{
"breachMainCategory": "malware",
"numRecords": 93604,
"title": "Breach Name",
"type": "PRIVATE",
"uuid": "string",
"shortTitle": "Breach Name",
"id": 178840,
"breachCategory": "infostealer",
"publishDate": "2026-06-16T19:35:35Z"
}
]
}
}
Returns a paginated catalog of the data breaches and infostealer/malware sources tracked in the dark-web breach dataset. Each entry is breach metadata (title, category, record count, severity, publish date, the data assets it exposed) — not the breached records themselves; use the breach-data lookups for those. Supports free-text search and date filtering. Page-based: pass page and limit, and page forward until results is empty.
See Errors for the response envelope and the full list of codes.
- URL:
/dpp/dwm/v2/breach/catalog - Full URL:
<base_url>/dpp/dwm/v2/breach/catalog - Request Method: GET
Authentication
Send the Access Token in theX-AccessToken request header on every authenticated call:
X-AccessToken: YOUR_ACCESS_TOKEN
Query Parameters
string
Free-text search over breach titles.
string
Only breaches published on/after this date (YYYY-MM-DD or ISO datetime)
string
Only breaches published on/before this date (YYYY-MM-DD or ISO datetime)
number
1-based page number (default 1)
number
Records per page (1-200; default 50)
Sample Request
cURL
curl -X GET "<base_url>/dpp/dwm/v2/breach/catalog" \
-H "X-AccessToken: YOUR_ACCESS_TOKEN"
curl -X GET "<base_url>/dpp/dwm/v2/breach/catalog" \
-H "X-AccessToken: YOUR_ACCESS_TOKEN"
Response
object
Sample Response
Success
{
"header": {
"message": "Success",
"response_code": 1
},
"body": {
"page": 1,
"limit": 50,
"results": [
{
"breachMainCategory": "malware",
"numRecords": 93604,
"title": "Breach Name",
"type": "PRIVATE",
"uuid": "string",
"shortTitle": "Breach Name",
"id": 178840,
"breachCategory": "infostealer",
"publishDate": "2026-06-16T19:35:35Z"
}
]
}
}
{
"header": {
"message": "Success",
"response_code": 1
},
"body": {
"page": 1,
"limit": 50,
"results": [
{
"breachMainCategory": "malware",
"numRecords": 93604,
"title": "Breach Name",
"type": "PRIVATE",
"uuid": "string",
"shortTitle": "Breach Name",
"id": 178840,
"breachCategory": "infostealer",
"publishDate": "2026-06-16T19:35:35Z"
}
]
}
}
Status Codes
| Status | Meaning |
|---|---|
200 | Page of breach metadata. Page forward with page/limit until results is empty. |
500 | Internal Server Error. |
Error codes
Returned inheader.response_code when the request fails.
| Code | Message |
|---|---|
11100 | Cluster1 is not configured |
11102 | Exposure lookup not permitted ({status}) |
11103 | Exposure lookup returned {status} |
11104 | Cluster1 is unavailable |
11199 | DWM response post-processing failed |