Have I Been Pwned (Independent Publisher) (Preview)

Check if your email address or phone number is in a data breach.

This connector is available in the following products and regions:

Service	Class	Regions
Logic Apps	Standard	All Logic Apps regions except the following:      -   Azure Government regions      -   Azure China regions      -   US Department of Defense (DoD)
Power Automate	Premium	All Power Automate regions except the following:      -   US Government (GCC)      -   US Government (GCC High)      -   China Cloud operated by 21Vianet      -   US Department of Defense (DoD)
Power Apps	Premium	All Power Apps regions except the following:      -   US Government (GCC)      -   US Government (GCC High)      -   China Cloud operated by 21Vianet      -   US Department of Defense (DoD)

Contact
Name	Troy Taylor
URL	https://www.hitachisolutions.com
Email	ttaylor@hitachisolutions.com

Connector Metadata
Publisher	Troy Taylor
Website	https://haveibeenpwned.com/
Privacy policy	https://haveibeenpwned.com/Privacy
Categories	Security

Creating a connection

The connector supports the following authentication types:

Default	Parameters for creating connection.	All regions	Not shareable

Default

Applicable: All regions

Parameters for creating connection.

This is not shareable connection. If the power app is shared with another user, another user will be prompted to create new connection explicitly.

Name	Type	Description	Required
hibp-api-key	securestring	The hibp-api-key for this api	True

Throttling Limits

Name	Calls	Renewal Period
API calls per connection	100	60 seconds

Actions

Get a single breached site	Sometimes just a single breach is required and this can be retrieved by the breach name. This is the stable value which may or may not be the same as the breach title (which can change).
Get all breached sites in the system	A breach is an instance of a system having been compromised by an attacker and the data disclosed.
Get all breaches for an account	Returns a list of all breaches a particular account has been involved in. The service takes a single parameter which is the account to be searched for. The account is not case sensitive and will be trimmed of leading or trailing white spaces.
Get all data classes in the system	A "data class" is an attribute of a record compromised in a breach. For example, many breaches expose data classes such as "Email addresses" and "Passwords". The values returned by this service are ordered alphabetically in a string array and will expand over time as new breaches expose previously unseen classes of data.
Get all pastes for an account	This action takes a single parameter which is the email address to be searched for. The email is not case sensitive and will be trimmed of leading or trailing white spaces.
Get the most recently added breach	Retrieve the most recently added breach.

Get a single breached site

Operation ID:

BreachSingle

Sometimes just a single breach is required and this can be retrieved by the breach name. This is the stable value which may or may not be the same as the breach title (which can change).

Parameters

Name	Key	Required	Type	Description
Name	name	True	string	A Pascal-cased name representing the breach which is unique across all other breaches.

Returns

Name	Path	Type	Description
Name	Name	string	The name.
Title	Title	string	The title.
Domain	Domain	string	The domain.
Breach Date	BreachDate	string	The date of breach.
Added Date	AddedDate	string	The date added.
Modified Date	ModifiedDate	string	The date, if any, modified.
Pwn Count	PwnCount	integer	The pwned count.
Description	Description	string	The description.
Logo Path	LogoPath	string	The path to the logo.
Data Classes	DataClasses	array of string	The attribute of a record compromised in a breach.
Is Verified	IsVerified	boolean	Whether is verified.
Is Fabricated	IsFabricated	boolean	Whether is fabricated.
Is Sensitive	IsSensitive	boolean	Whether is sensitive.
Is Retired	IsRetired	boolean	Whether is retired.
Is Spam List	IsSpamList	boolean	Whether is on spam list.
Is Malware	IsMalware	boolean	Whether is malware.

Get all breached sites in the system

Operation ID:

AllBreaches

A breach is an instance of a system having been compromised by an attacker and the data disclosed.

Returns

Name	Path	Type	Description
		array of object
Name	Name	string	The name.
Title	Title	string	The title.
Domain	Domain	string	The domain.
Breach Date	BreachDate	string	The date of the breach.
Added Date	AddedDate	string	The date added.
Modified Date	ModifiedDate	string	The date, if any, modified.
Pwn Count	PwnCount	integer	The count pwned.
Description	Description	string	The description.
Logo Path	LogoPath	string	The path of the logo.
Data Classes	DataClasses	array of string	The attribute of a record compromised in a breach.
Is Verified	IsVerified	boolean	Whether it is verified.
Is Fabricated	IsFabricated	boolean	Whether is fabricated.
Is Sensitive	IsSensitive	boolean	Whether is sensitive.
Is Retired	IsRetired	boolean	Whether is retired.
Is Spam List	IsSpamList	boolean	Whether is on spam list.
Is Malware	IsMalware	boolean	Whether is malware.

Get all breaches for an account

Operation ID:

AllBreachesAccount

Returns a list of all breaches a particular account has been involved in. The service takes a single parameter which is the account to be searched for. The account is not case sensitive and will be trimmed of leading or trailing white spaces.

Parameters

Name	Key	Required	Type	Description
Account	account	True	string	Either an email address or telephone number.
Truncate Response	truncateResponse		boolean	Whether to return the full breach model.
Domain	domain		string	Filters the result set to only breaches against the domain specified.
Include Unverified	includeUnverified		boolean	Returns breaches that have been flagged as unverified. By default, both verified and unverified breaches are returned when performing a search.

Returns

Name	Path	Type	Description
		array of object
Name	Name	string	The name.
Title	Title	string	The title.
Domain	Domain	string	The domain.
Breach Date	BreachDate	string	The date of the breach.
Added Date	AddedDate	string	The date added.
Modified Date	ModifiedDate	string	The date, if any, modified.
Pwn Count	PwnCount	integer	The count pwned.
Description	Description	string	The description.
Logo Path	LogoPath	string	The path of the logo.
Data Classes	DataClasses	array of string	The attribute of a record compromised in a breach.
Is Verified	IsVerified	boolean	Whether it is verified.
Is Fabricated	IsFabricated	boolean	Whether it is fabricated.
Is Sensitive	IsSensitive	boolean	Whether is sensitive.
Is Retired	IsRetired	boolean	Whether is retired.
Is Spam List	IsSpamList	boolean	Whether is on spam list.
Is Malware	IsMalware	boolean	Whether is malware.

Get all data classes in the system

Operation ID:

DataClasses

A "data class" is an attribute of a record compromised in a breach. For example, many breaches expose data classes such as "Email addresses" and "Passwords". The values returned by this service are ordered alphabetically in a string array and will expand over time as new breaches expose previously unseen classes of data.

Returns

Name	Path	Type	Description
		array of string

Get all pastes for an account

Operation ID:

Pastes

This action takes a single parameter which is the email address to be searched for. The email is not case sensitive and will be trimmed of leading or trailing white spaces.

Parameters

Name	Key	Required	Type	Description
Account	account	True	string	The account.

Returns

Name	Path	Type	Description
		array of object
Source	Source	string	The source.
ID	Id	string	The identifier.
Title	Title	string	The title.
Date	Date	string	The date.
Email Count	EmailCount	integer	The email count.

Get the most recently added breach

Operation ID:

BreachRecent

Retrieve the most recently added breach.

Returns

Name	Path	Type	Description
Name	Name	string	The name.
Title	Title	string	The title.
Domain	Domain	string	The domain.
Breach Date	BreachDate	string	The breach date.
Added Date	AddedDate	string	The added date.
ModifiedDate	ModifiedDate	string	The modified date.
Pwn Count	PwnCount	integer	The pwn count.
Description	Description	string	The description.
Logo Path	LogoPath	string	The logo path.
Data Classes	DataClasses	array of string	The data classes.
Is Verified	IsVerified	boolean	Whether is verified.
Is Fabricated	IsFabricated	boolean	Whether is fabricated.
Is Sensitive	IsSensitive	boolean	Whether is sensitive.
Is Retired	IsRetired	boolean	Whether is retired.
Is Spam List	IsSpamList	boolean	Whether is spam list.
Is Malware	IsMalware	boolean	Whether is malware.
Is Subscription Free	IsSubscriptionFree	boolean	Whether is subscription free.