---
title: "Get all leaked credentials"
method: GET
path: "/v1/leaks"
---

# Get all leaked credentials

`GET /v1/leaks`

Returns all leaks (personal, employee, customer) with optional type filtering. Replaces the need for separate endpoint calls.

## Query parameters

- `type` 'all' | 'personal' | 'employee' | 'customer' | 'external_vendor_leaks' | 'organization_leaks'
- `domain` string
- `email` string
- `search` string
- `limit` number
- `page_number` number
- `start_date` string, date
- `time_range` 'all_time' | 'current_month' | 'last_month' | 'last_3_months' | 'last_6_months' | 'last_12_months'
- `end_date` string, date
- `sort_by` 'url' | 'username' | 'log_date' | 'country' | 'device_ip' | 'host_username' | 'hostname' | 'os' | 'hardware_id' | 'malware_path'
- `sort_order` 'asc' | 'desc'
- `status` 'fixed' | 'open'
- `group_by` 'url' | 'country' | 'device_ip' | 'hostname' | 'email' | 'hardware_id'
- `url` string
- `country` string
- `device_ip` string
- `hostname` string
- `hardware_id` string

## Response `200`

OK

- object
  - `data` object[]
    - `id` string
    - `url` string
    - `username` string
    - `password` string
    - `device_ip` string
    - `hostname` string
    - `os` string
    - `malware_path` string
    - `country` string
    - `log_date` string
    - `hardware_id` string
    - `domain` string
    - `email_domain` string
    - `url_domain` string
    - `fetched_at` string
    - `status` string
    - `user_type` string — Classification of leak type (personal, employee, customer, external_vendor_leaks, organization_leaks)
  - `total_leaks` number
  - `total_pages` number
  - `total_count` number
  - `summary` object
    - `total_leaks` number
    - `personal_leaks` number
    - `employee_leaks` number
    - `customer_leaks` number
    - `external_vendor_leaks` number — Employee leaks on external vendor systems (login URL domain != email domain)
    - `organization_leaks` number — Employee leaks on organization systems (login URL domain == email domain)
  - `group_summary` object[] — Group summary data when group_by parameter is used

## Other responses

- `400` — Example response
- `401` — Example response
- `403` — Example response
- `404` — Example response
- `500` — Example response
- `default` — Example response

---

[API](https://skmtc.net/projectdiscovery/apis/pdcp-api.md) · [All operations](https://skmtc.net/projectdiscovery/apis/pdcp-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/projectdiscovery/pdcp-api/versions/220f0adf9efd/schema)