Get all breached account hashes for a range
Available on Pro and High RPM subscriptions. Search breached addresses via k-anonymity by providing the first 6 characters of the SHA-1 hash of a normalised email address. The response contains matching hash suffixes and associated breach names after public filtering. Sensitive and retired breaches are not returned. Per the terms of use, any results that do not match the target address being searched must be discarded immediately and not stored or further processed.
Path parameters
First 6 characters of the SHA-1 hash of the email address to search for (hexadecimal, not case-sensitive)
Headers
User agent string identifying the consuming application. Required on all documented requests, including unauthenticated endpoints; missing user agents may receive HTTP 403 responses.
Response
Hash suffixes and breach names for addresses in the requested range. Sensitive breaches are removed and any suffix with no remaining public breaches is omitted.