Share via


Have I Been Pwned (Independent Publisher) (Preview)

Check if your email address or phone number is in a data breach.

This connector is available in the following products and regions:

Service Class Regions
Logic Apps Standard All Logic Apps regions except the following:
     -   Azure Government regions
     -   Azure China regions
     -   US Department of Defense (DoD)
Power Automate Premium All Power Automate regions except the following:
     -   US Government (GCC)
     -   US Government (GCC High)
     -   China Cloud operated by 21Vianet
     -   US Department of Defense (DoD)
Power Apps Premium All Power Apps regions except the following:
     -   US Government (GCC)
     -   US Government (GCC High)
     -   China Cloud operated by 21Vianet
     -   US Department of Defense (DoD)
Contact
Name Troy Taylor
URL https://www.hitachisolutions.com
Email ttaylor@hitachisolutions.com
Connector Metadata
Publisher Troy Taylor
Website https://haveibeenpwned.com/
Privacy policy https://haveibeenpwned.com/Privacy
Categories Security

Creating a connection

The connector supports the following authentication types:

Default Parameters for creating connection. All regions Not shareable

Default

Applicable: All regions

Parameters for creating connection.

This is not shareable connection. If the power app is shared with another user, another user will be prompted to create new connection explicitly.

Name Type Description Required
hibp-api-key securestring The hibp-api-key for this api True

Throttling Limits

Name Calls Renewal Period
API calls per connection 100 60 seconds

Actions

Get a single breached site

Sometimes just a single breach is required and this can be retrieved by the breach name. This is the stable value which may or may not be the same as the breach title (which can change).

Get all breached sites in the system

A breach is an instance of a system having been compromised by an attacker and the data disclosed.

Get all breaches for an account

Returns a list of all breaches a particular account has been involved in. The service takes a single parameter which is the account to be searched for. The account is not case sensitive and will be trimmed of leading or trailing white spaces.

Get all data classes in the system

A "data class" is an attribute of a record compromised in a breach. For example, many breaches expose data classes such as "Email addresses" and "Passwords". The values returned by this service are ordered alphabetically in a string array and will expand over time as new breaches expose previously unseen classes of data.

Get all pastes for an account

This action takes a single parameter which is the email address to be searched for. The email is not case sensitive and will be trimmed of leading or trailing white spaces.

Get the most recently added breach

Retrieve the most recently added breach.

Get a single breached site

Sometimes just a single breach is required and this can be retrieved by the breach name. This is the stable value which may or may not be the same as the breach title (which can change).

Parameters

Name Key Required Type Description
Name
name True string

A Pascal-cased name representing the breach which is unique across all other breaches.

Returns

Name Path Type Description
Name
Name string

The name.

Title
Title string

The title.

Domain
Domain string

The domain.

Breach Date
BreachDate string

The date of breach.

Added Date
AddedDate string

The date added.

Modified Date
ModifiedDate string

The date, if any, modified.

Pwn Count
PwnCount integer

The pwned count.

Description
Description string

The description.

Logo Path
LogoPath string

The path to the logo.

Data Classes
DataClasses array of string

The attribute of a record compromised in a breach.

Is Verified
IsVerified boolean

Whether is verified.

Is Fabricated
IsFabricated boolean

Whether is fabricated.

Is Sensitive
IsSensitive boolean

Whether is sensitive.

Is Retired
IsRetired boolean

Whether is retired.

Is Spam List
IsSpamList boolean

Whether is on spam list.

Is Malware
IsMalware boolean

Whether is malware.

Get all breached sites in the system

A breach is an instance of a system having been compromised by an attacker and the data disclosed.

Returns

Name Path Type Description
array of object
Name
Name string

The name.

Title
Title string

The title.

Domain
Domain string

The domain.

Breach Date
BreachDate string

The date of the breach.

Added Date
AddedDate string

The date added.

Modified Date
ModifiedDate string

The date, if any, modified.

Pwn Count
PwnCount integer

The count pwned.

Description
Description string

The description.

Logo Path
LogoPath string

The path of the logo.

Data Classes
DataClasses array of string

The attribute of a record compromised in a breach.

Is Verified
IsVerified boolean

Whether it is verified.

Is Fabricated
IsFabricated boolean

Whether is fabricated.

Is Sensitive
IsSensitive boolean

Whether is sensitive.

Is Retired
IsRetired boolean

Whether is retired.

Is Spam List
IsSpamList boolean

Whether is on spam list.

Is Malware
IsMalware boolean

Whether is malware.

Get all breaches for an account

Returns a list of all breaches a particular account has been involved in. The service takes a single parameter which is the account to be searched for. The account is not case sensitive and will be trimmed of leading or trailing white spaces.

Parameters

Name Key Required Type Description
Account
account True string

Either an email address or telephone number.

Truncate Response
truncateResponse boolean

Whether to return the full breach model.

Domain
domain string

Filters the result set to only breaches against the domain specified.

Include Unverified
includeUnverified boolean

Returns breaches that have been flagged as unverified. By default, both verified and unverified breaches are returned when performing a search.

Returns

Name Path Type Description
array of object
Name
Name string

The name.

Title
Title string

The title.

Domain
Domain string

The domain.

Breach Date
BreachDate string

The date of the breach.

Added Date
AddedDate string

The date added.

Modified Date
ModifiedDate string

The date, if any, modified.

Pwn Count
PwnCount integer

The count pwned.

Description
Description string

The description.

Logo Path
LogoPath string

The path of the logo.

Data Classes
DataClasses array of string

The attribute of a record compromised in a breach.

Is Verified
IsVerified boolean

Whether it is verified.

Is Fabricated
IsFabricated boolean

Whether it is fabricated.

Is Sensitive
IsSensitive boolean

Whether is sensitive.

Is Retired
IsRetired boolean

Whether is retired.

Is Spam List
IsSpamList boolean

Whether is on spam list.

Is Malware
IsMalware boolean

Whether is malware.

Get all data classes in the system

A "data class" is an attribute of a record compromised in a breach. For example, many breaches expose data classes such as "Email addresses" and "Passwords". The values returned by this service are ordered alphabetically in a string array and will expand over time as new breaches expose previously unseen classes of data.

Returns

Name Path Type Description
array of string

Get all pastes for an account

This action takes a single parameter which is the email address to be searched for. The email is not case sensitive and will be trimmed of leading or trailing white spaces.

Parameters

Name Key Required Type Description
Account
account True string

The account.

Returns

Name Path Type Description
array of object
Source
Source string

The source.

ID
Id string

The identifier.

Title
Title string

The title.

Date
Date string

The date.

Email Count
EmailCount integer

The email count.

Get the most recently added breach

Retrieve the most recently added breach.

Returns

Name Path Type Description
Name
Name string

The name.

Title
Title string

The title.

Domain
Domain string

The domain.

Breach Date
BreachDate string

The breach date.

Added Date
AddedDate string

The added date.

ModifiedDate
ModifiedDate string

The modified date.

Pwn Count
PwnCount integer

The pwn count.

Description
Description string

The description.

Logo Path
LogoPath string

The logo path.

Data Classes
DataClasses array of string

The data classes.

Is Verified
IsVerified boolean

Whether is verified.

Is Fabricated
IsFabricated boolean

Whether is fabricated.

Is Sensitive
IsSensitive boolean

Whether is sensitive.

Is Retired
IsRetired boolean

Whether is retired.

Is Spam List
IsSpamList boolean

Whether is spam list.

Is Malware
IsMalware boolean

Whether is malware.

Is Subscription Free
IsSubscriptionFree boolean

Whether is subscription free.