HaveIBeenPwned

HaveIBeenPwned (HIBP) is a comprehensive data breach notification and password security verification service that tracks compromised accounts, credentials, and exposed data across thousands of security breaches, data leaks, and paste sites. This platform enables security teams, compliance officers, and IT administrators to determine if email addresses, usernames, passwords, or organizational credentials have been exposed in known data breaches or publicly leaked information.

Category	Threat intelligence
Direction	Query source
Sign-in	HIBP API Key
Query languages	SQLite
Tables	4
Query templates	13
Website	haveibeenpwned.com

Before you start

Huntbase signs in to HaveIBeenPwned with HIBP API Key. Create the credential in HaveIBeenPwned first, then keep it to hand for the Connect step.

1. Go to the Have I Been Pwned API key page and sign in to your dashboard with an email verification link or a passkey.
2. Purchase an API key subscription from the dashboard and copy the key.

Watch out for

• You need the key only to search by email address, such as breached accounts and pastes. You can query the breach catalog and Pwned Passwords without it.

For the vendor's own instructions, see Have I Been Pwned API key page.

tip

Use a dedicated, read-only credential for Huntbase where the product allows it. Huntbase only needs to read.

Connect HaveIBeenPwned

1. Go to Connections and click New connection, or click New connection on the HaveIBeenPwned product page.
2. On Product, pick HaveIBeenPwned and choose the Owner.
3. On Details, give the connection a Name and, optionally, a Description.
4. On Connect, fill in the settings and credentials described below.
5. On Verify, review the summary and click Create & check.

For everything else on the setup page — saving a draft, I'll do this later, and what each check result means — see Connections.

Credentials

The only Method is HIBP API Key. Enter a Credential label (for example Production), then fill in:

Field	Required	Notes
HIBP API Key	Yes	A 32-character hexadecimal string. Secret — not shown again after you save it.

Query it

Once connected, HaveIBeenPwned can serve these languages in a query tab, and Scout can use it when you ask in Auto:

Language	Use it for
SQLite	SQL over the 4 tables listed below, alongside every other connected source.

Example: SQLite

List unverified breaches — Discover breaches that have not been verified.

SELECT
  title,
  pwn_count,
  breach_date
FROM
  hibp_breach
WHERE
  is_verified = 0;

HaveIBeenPwned ships with 13 query templates. Find them in Library › Queries — see Query templates.

Tables

HaveIBeenPwned adds 4 tables. Browse their columns from Schema in the query bar's ⋯ menu.

All 4 tables

Table	Contains
hibp_breach	Breaches tracked by HIBP.
hibp_breached_account	Breached accounts tracked by HIBP.
hibp_password	Password (hashes) tracked by HIBP.
hibp_paste	Pastes tracked by HIBP.

Next steps

• Connections — health, credentials and settings after you connect
• Query languages — syntax, parameters and time ranges
• Chatting with Scout — ask questions without writing a query
• All integrations — the rest of the catalog