🛡 Have I Been Pwned Breaches Catalog Scraper

🚀 Export the full Have I Been Pwned breach catalog in one run. Pull all 1,001+ documented data breaches with company logos, breach dates, account counts, and the exact categories of data exposed.

Have I Been Pwned (HIBP) is the most widely trusted public registry of known data breaches, maintained by security researcher Troy Hunt. This Actor reads the public breach catalog and turns it into clean, structured records you can analyze, monitor, and feed into your own security tooling. It is built for defensive security work and breach awareness, not for looking up individual people.

Coverage: every breach in the public HIBP catalog (over 1,001 entries at last refresh), including the company logo, the date the breach occurred, when it was added to HIBP, the number of accounts affected, a full description, and the list of data classes exposed such as email addresses, passwords, IP addresses, and phone numbers. You can list the entire catalog, filter by a single domain, or pull one breach by name.

🎯 Target Audience	💡 Primary Use Cases
Security analysts and blue teams	Track new and historical breaches affecting your domains
Threat intelligence researchers	Build a structured breach dataset for analysis
Compliance and risk teams	Evidence gathering for vendor and third party risk reviews
Developers and data engineers	Power dashboards, alerts, and awareness tooling

📋 What the HIBP Breaches Catalog Scraper does

This Actor connects to the public Have I Been Pwned breach catalog and returns structured breach records. It supports three modes:

• All breaches lists every breach in the catalog.
• Breaches by domain returns only the breaches tied to a domain you provide, for example adobe.com.
• Single breach by name fetches one breach by its HIBP name, for example Adobe or LinkedIn.

Each record leads with the breached company logo and includes the breach date, the number of accounts affected, a description, and the categories of data exposed. The Actor only reads the breach catalog, which is public and keyless. It never looks up individual email addresses or accounts.

📊 Data fields

Each record includes: breachDate, dataClasses, domain, imageUrl, isVerified, name, pwnCount, results, scrapedAt, title. These field names come straight from the actor's dataset schema, so what you see here is what lands in your dataset.

🚀 How to use

1. Create a free Apify account using this sign up link.
2. Open the HIBP Breaches Catalog Scraper.
3. Pick a mode. Leave it on all to list the entire catalog, or choose domain or breach and fill the matching field.
4. Set maxItems if you want fewer records, then click Start.
5. Download your results or connect them to another app through the Apify API and integrations.

🔗 Recommended Actors

• CISA KEV Scraper for known exploited vulnerabilities.
• NIST NVD CVE Scraper for the national vulnerability database.
• URLhaus Malware URLs Scraper for malicious URL intelligence.
• Feodo Tracker C2 Scraper for botnet command and control servers.
• GitHub Security Advisories Scraper for open source advisories.

💡 Pro Tip: browse the complete ParseForge collection.

⚠️ Disclaimer: independent tool, not affiliated with Have I Been Pwned. Only publicly available breach catalog data is collected. This Actor is intended for defensive security, breach awareness, and research, and does not perform lookups of individual people.

🆘 Need Help?

If you hit a bug, have questions about setup, or need a scraper we haven't built yet, open our contact form or write to parseforge@protonmail.com. We also take on paid custom data projects.

For faster answers, join our Discord. It's the best place to get support and suggest new actors.