# 🛡️ Email Data Breach & Credential Leak Hunter (`unrivaled_fortress/email-data-breach-osint`) Actor

Check emails against known public data breaches and credential exposures. Returns breach names, dates, leaked fields, paste records, and risk severity. No API key required.

- **URL**: https://apify.com/unrivaled\_fortress/email-data-breach-osint.md
- **Developed by:** [David A](https://apify.com/unrivaled_fortress) (community)
- **Categories:** Lead generation, AI, Developer tools
- **Stats:** 2 total users, 1 monthly users, 100.0% runs succeeded, 0 bookmarks
- **User rating**: No ratings yet

## Pricing

from $3.00 / 1,000 results

This Actor is paid per event. You are not charged for the Apify platform usage, but only a fixed price for specific events.

Learn more: https://docs.apify.com/actors/running/actors-in-store.md#pay-per-event

## What's an Apify Actor?

An Actor is a serverless cloud program that runs on the Apify platform. It has two run modes.
In Batch mode, an Actor accepts a well-defined JSON input, performs an action which can take anything from a few seconds to a few hours,
and optionally produces a well-defined JSON output, datasets with results, or files in key-value store.
In Standby mode, an Actor provides a web server which can be used as a website, API, or an MCP server.

Apify vocabulary and the platform model are defined once, in the agent quickstart at https://apify.com/agents.md.

## How to integrate an Actor?

If asked about integration, you help developers integrate Actors into their projects.
You adapt to their stack and deliver integrations that are safe, well-documented, and production-ready.

Do not guess an integration path. Every one of them is in the agent quickstart at https://apify.com/agents.md: the Apify MCP server, Agent Skills with the Apify CLI, the JavaScript and Python clients, the REST API, and the account-free path for an agent with no human to sign in. It also carries the rule on stating cost before the first paid run.

For examples already wired to this Actor's own input schema, see the [API](#api) section below.

Each client library has reference documentation the quickstart does not restate: [JavaScript/TypeScript](https://docs.apify.com/api/client/js/docs.md) (`npm install apify-client`) and [Python](https://docs.apify.com/api/client/python/docs.md) (`pip install apify-client`).

# README

## 🛡️ Email Data Breach & Credential Leak Hunter

**Verify if an email address has been compromised in public data breaches, credential dumps, or paste sites.** Get full exposure diagnostics, compromised data categories (passwords, phone numbers, IP addresses), risk scores, and incident timelines — **no API key required**.

***

#### 🔥 The B2B Contact & OSINT Intelligence Suite

Build a complete lead verification & security investigation pipeline by combining these specialized tools:

| Tool | Purpose | Pricing | Link |
| :--- | :--- | :--- | :--- |
| 🛡️ **Email Data Breach Hunter** | Detect compromised credentials & public database leaks | $3.00 / 1K | [View on Store →](https://apify.com/unrivaled_fortress/email-data-breach-osint) |
| 🔍 **OSINT People Search** | Find digital footprints across 10+ social & developer platforms | $1.50 / 1K | [View on Store →](https://apify.com/unrivaled_fortress/osint-person-lookup) |
| 📱 **Phone Number Lookup** | Carrier, line type (mobile/VoIP/landline), E.164 validator | $1.50 / 1K | [View on Store →](https://apify.com/unrivaled_fortress/phone-lookup) |
| 📧 **Email Verifier** | 0–100 deliverability score, MX lookup, disposable email check | $2.00 / 1K | [View on Store →](https://apify.com/unrivaled_fortress/email-verifier) |
| 🌐 **Email & Domain Intelligence** | SPF, DKIM, DMARC, WHOIS, and security DNS health check | $1.50 / 1K | [View on Store →](https://apify.com/unrivaled_fortress/email-domain-info) |
| 💼 **LinkedIn Employees Scraper** | Extract decision makers & employee leads for B2B outreach | $5.00 / 1K | [View on Store →](https://apify.com/unrivaled_fortress/linkedin-company-employees) |

***

### ✨ Features

- 🔍 **Global Breach Coverage**: Checks against hundreds of historic and recent public database breaches.
- ⚡ **Lightning Fast**: Sub-second execution using high-speed threat intelligence endpoints.
- 📊 **Risk Scoring**: Returns numeric `riskScore` (0–100) and severity classification (`Safe`, `Medium`, `High`, `Critical`).
- 📁 **Compromised Data Taxonomy**: Identifies exactly what leaked (Passwords, Names, Phone numbers, IPs, Locations).
- 🔄 **Batch Mode**: Inspect single addresses or list of hundreds in one run.
- 🚫 **No API Key Required**: Fully managed, public threat intel endpoints.

### 📥 Input Parameters

| Field | Type | Default | Description |
| :--- | :--- | :--- | :--- |
| `email` | String | `"test@example.com"` | Single email address to check |
| `emails` | Array of Strings | `[]` | List of email addresses for batch checking |
| `maxResults` | Integer | `100` | Maximum emails to process in one run |

### 📤 Output Dataset Format

```json
{
  "email": "user@company.com",
  "status": "EXPOSED",
  "riskScore": 85,
  "riskLabel": "High",
  "totalBreaches": 5,
  "breachedSites": ["Canva", "LinkedIn", "Dropbox", "Adobe"],
  "exposedDataTypes": ["Passwords", "Email addresses", "Usernames", "IP addresses"],
  "breaches": [
    {
      "breachId": "Canva",
      "domain": "canva.com",
      "industry": "Graphic Design",
      "breachDate": "2019-05-24",
      "pwnCount": 137000000,
      "dataClasses": ["Passwords", "Usernames", "Names"],
      "description": "In May 2019, graphic-design tool Canva suffered a data breach impacting 137 million subscribers."
    }
  ],
  "pastesCount": 1,
  "queriedAt": "2026-09-17T20:45:00.000Z"
}
```

### 💡 Practical Use Cases

- **Security Audits & Employee Hygiene**: Monitor corporate email domains for credential exposure.
- **Fraud Prevention & KYC**: Flag high-risk user registrations using known compromised credentials.
- **Private Investigations & OSINT**: Trace historical digital footprint and breach exposure timelines.
- **Account Takeover (ATO) Protection**: Proactively prompt users to reset passwords if their email appears in new leaks.

### 🤖 AI Agent & MCP Server Integration

Run this Actor directly from AI Agents, LLM pipelines, or Cursor / Claude Desktop:

- **Apify MCP Server URL**:
  `https://mcp.apify.com/?tools=fetch-actor-details,unrivaled_fortress/email-data-breach-osint`
- **Python**:
  ```python
  from apify_client import ApifyClient
  client = ApifyClient("YOUR_APIFY_TOKEN")
  run = client.actor("unrivaled_fortress/email-data-breach-osint").call(run_input={"email": "target@domain.com"})
  ```
- **JavaScript / TypeScript**:
  ```javascript
  import { ApifyClient } from 'apify-client';
  const client = new ApifyClient({ token: 'YOUR_APIFY_TOKEN' });
  const run = await client.actor('unrivaled_fortress/email-data-breach-osint').call({ email: 'target@domain.com' });
  ```

***

### ⭐ Loved using this Actor?

If this Actor saved you time or powered your workflow, **please take 10 seconds to leave a 5-star rating**! It helps indie developers maintain fast, reliable security tools.

👉 [**Click here to leave a review & rating on Apify Store**](https://apify.com/unrivaled_fortress/email-data-breach-osint#reviews)

***

**Crafted by [David Ahn](https://apify.com/unrivaled_fortress)** · Powered by public OSINT & threat intelligence

# Actor input Schema

## `email` (type: `string`):

Single email address to check.

## `emails` (type: `array`):

List of email addresses for bulk checking.

## `maxResults` (type: `integer`):

Max email addresses to process.

## Actor input object example

```json
{
  "email": "test@example.com",
  "emails": [],
  "maxResults": 100
}
```

# Actor output Schema

## `results` (type: `string`):

No description

# API

You can run this Actor programmatically using our API. Below are code examples in JavaScript, Python, and CLI, as well as the OpenAPI specification and MCP server setup.

## JavaScript example

```javascript
import { ApifyClient } from 'apify-client';

// Initialize the ApifyClient with your Apify API token
// Replace the '<YOUR_API_TOKEN>' with your token
const client = new ApifyClient({
    token: '<YOUR_API_TOKEN>',
});

// Prepare Actor input
const input = {
    "email": "test@example.com",
    "emails": []
};

// Run the Actor and wait for it to finish
const run = await client.actor("unrivaled_fortress/email-data-breach-osint").call(input);

// Fetch and print Actor results from the run's dataset (if any)
console.log('Results from dataset');
console.log(`💾 Check your data here: https://console.apify.com/storage/datasets/${run.defaultDatasetId}`);
const { items } = await client.dataset(run.defaultDatasetId).listItems();
items.forEach((item) => {
    console.dir(item);
});

// 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/js/docs

```

## Python example

```python
from apify_client import ApifyClient

# Initialize the ApifyClient with your Apify API token
# Replace '<YOUR_API_TOKEN>' with your token.
client = ApifyClient("<YOUR_API_TOKEN>")

# Prepare the Actor input
run_input = {
    "email": "test@example.com",
    "emails": [],
}

# Run the Actor and wait for it to finish
run = client.actor("unrivaled_fortress/email-data-breach-osint").call(run_input=run_input)

# Fetch and print Actor results from the run's dataset (if there are any)
print(f"💾 Check your data here: https://console.apify.com/storage/datasets/{run.default_dataset_id}")
for item in client.dataset(run.default_dataset_id).iterate_items():
    print(item)

# 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/python/docs/quick-start

```

## CLI example

```bash
echo '{
  "email": "test@example.com",
  "emails": []
}' |
apify call unrivaled_fortress/email-data-breach-osint --silent --output-dataset

```

## MCP server setup

```json
{
    "mcpServers": {
        "apify": {
            "type": "http",
            "url": "https://mcp.apify.com/?tools=fetch-actor-details,unrivaled_fortress/email-data-breach-osint"
        }
    }
}
```

The hosted server signs you in with OAuth on first connect, so no API token belongs in this config. Clients without OAuth support can send an `Authorization: Bearer <APIFY_API_TOKEN>` header instead, using a token from API & Integrations in Apify Console (https://console.apify.com/settings/integrations).

## OpenAPI specification

Download the OpenAPI definition: https://api.apify.com/v2/actors/n4gSM2SFYzy8gz4wX/builds/o3alnqo4O1trsGwpk/openapi.json