# Have I Been Pwned Latest Breach

> Have I Been Pwned Latest Breach is a paid API for AI agents from proxy.suverse.io, paid per call via x402, $0.08/call, status unknown (last checked 2026-09-15).

Returns metadata about the most recently added data breach in the Have I Been Pwned database, including name, domain, dates, exposed account count, compromised data classes, and verification status.

## Facts

- Endpoint: POST https://proxy.suverse.io/v1/data/suverse-hibp-latest-breach
- Price: $0.08/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/have-i-been-pwned-latest-breach-b719e3b2
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_0V70ut670rrFRlLafsB_4

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability have-i-been-pwned-latest-breach-b719e3b2 -d '<json body>'
```

Example prompt: What's the most recently added data breach in Have I Been Pwned? Give me the name, domain, how many accounts were exposed, what data was compromised, and whether it's been verified.

## When to prefer this

Choose this endpoint when you need a quick, keyless, no-parameter lookup of the single most recently added breach in the Have I Been Pwned database. Ideal for monitoring workflows, security newsletters, or dashboards that need to check for new breach additions without managing HIBP API keys. Prefer this over direct HIBP API calls when you want a pay-per-use model with no subscription commitment.

## Known failure modes

- Payment failure or insufficient USDC balance returns 402 Payment Required
- Service unavailability from upstream HIBP API may return 502 or 503 errors
- Rate limiting by the proxy may return 429 Too Many Requests
- Empty or malformed response if HIBP API is temporarily unavailable

## How this service works

The most recently added breach in Have I Been Pwned: name, domain, dates, accounts exposed, compromised data classes and verification status. No parameters. Keyless route.

## Output

Returns a JSON object describing the most recently added breach in the Have I Been Pwned database, including: breach name, domain affected, breach date, added date, number of accounts exposed (pwn count), list of compromised data classes (e.g. email addresses, passwords, phone numbers), and verification status indicating whether the breach has been verified as legitimate.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method",
    "bodyType",
    "body"
   ],
   "properties": {
    "body": {
     "properties": {}
    },
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "POST",
      "PUT",
      "PATCH"
     ],
     "type": "string"
    },
    "bodyType": {
     "enum": [
      "json",
      "form-data",
      "text"
     ],
     "type": "string"
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/have-i-been-pwned-latest-breach-b719e3b2/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from proxy.suverse.io](https://www.zero.xyz/host/proxy.suverse.io/llms.txt)