# Cyber Threat Intelligence (CTI)

Cyber Threat Intelligence: email breaches, compromised employee/client/payment credentials, compromised devices, threat actors and security news relevant…

Source: https://docs.deepinfo.com/reference/cti/

Last updated: 2026-09-27

---
Email breaches, compromised employee/client/payment credentials, compromised devices, threat actors and security news relevant to your organization.

## Email Breaches

Public data breaches that include email addresses on your domains.

| Method | Endpoint | Path |
|---|---|---|
| GET | [Breached Account List](/reference/cti/breached-account-list/) | `/cti/email-breaches/accounts` |
| GET | [Email Breach List](/reference/cti/email-breach-list/) | `/cti/email-breaches/breaches` |
| GET | [Breached Account Detail](/reference/cti/breached-account-detail/) | `/cti/email-breaches/accounts/{account_id}` |
| GET | [Email Breach Detail](/reference/cti/email-breach-detail/) | `/cti/email-breaches/breaches/{breach_id}` |
| GET | [Email Breach Account Titles](/reference/cti/email-breach-account-titles/) | `/cti/email-breaches/account-titles` |
| GET | [Email Breach Data Types](/reference/cti/email-breach-data-types/) | `/cti/email-breaches/data-types` |
| GET | [Latest Email Breaches](/reference/cti/latest-email-breaches/) | `/cti/email-breaches/breaches/latest` |
| GET | [Breached Account Stats](/reference/cti/breached-account-stats/) | `/cti/email-breaches/accounts/{account_id}/stats` |
| GET | [Breached Accounts Domain Stats](/reference/cti/breached-accounts-domain-stats/) | `/cti/email-breaches/accounts/stats/domain` |
| GET | [Email Breach Stats](/reference/cti/email-breach-stats/) | `/cti/email-breaches/breaches/stats` |
| PUT | [Breached Account Update](/reference/cti/breached-account-update/) | `/cti/email-breaches/accounts/{account_id}` |

## Compromised Employee Accounts

Employee accounts found in leaked credential data.

| Method | Endpoint | Path |
|---|---|---|
| POST | [Compromised Employee Account Search](/reference/cti/compromised-employee-account-search/) | `/cti/compromised-employee-accounts/search` |
| POST | [Compromised Employee Account Export](/reference/cti/compromised-employee-account-export/) | `/cti/compromised-employee-accounts/search:export` |
| GET | [Compromised Employee Account Detail](/reference/cti/compromised-employee-account-detail/) | `/cti/compromised-employee-accounts/{account_id}` |
| GET | [Compromised Employee Account Risk Distribution Stats](/reference/cti/compromised-employee-account-risk-distribution-stats/) | `/cti/compromised-employee-accounts/stats/risk-distribution` |
| GET | [Compromised Employee Accounts Domain Stats](/reference/cti/compromised-employee-accounts-domain-stats/) | `/cti/compromised-employee-accounts/stats/domain` |
| PUT | [Compromised Employee Account Update](/reference/cti/compromised-employee-account-update/) | `/cti/compromised-employee-accounts/{account_id}` |

## Compromised Employee Credentials

Leaked credentials of your employees.

| Method | Endpoint | Path |
|---|---|---|
| POST | [Compromised Employee Credential Search](/reference/cti/compromised-employee-credential-search/) | `/cti/compromised-employee-credentials/search` |
| POST | [Compromised Employee Credential Export](/reference/cti/compromised-employee-credential-export/) | `/cti/compromised-employee-credentials/search:export` |
| POST | [Compromised Employee Credential Accept Risk](/reference/cti/compromised-employee-credential-accept-risk/) | `/cti/compromised-employee-credentials/search:accept-risk` |
| POST | [Compromised Employee Credential Ignore](/reference/cti/compromised-employee-credential-ignore/) | `/cti/compromised-employee-credentials/search:ignore` |
| POST | [Compromised Employee Credential Mark False Positive](/reference/cti/compromised-employee-credential-mark-false-positive/) | `/cti/compromised-employee-credentials/search:mark-false-positive` |
| POST | [Compromised Employee Credential Mark Resolved](/reference/cti/compromised-employee-credential-mark-resolved/) | `/cti/compromised-employee-credentials/search:mark-resolved` |
| POST | [Compromised Employee Credential Revert](/reference/cti/compromised-employee-credential-revert/) | `/cti/compromised-employee-credentials/search:revert` |
| GET | [Compromised Employee Credential Exposure Timeline](/reference/cti/compromised-employee-credential-exposure-timeline/) | `/cti/compromised-employee-credentials/stats/exposure-timeline` |
| GET | [Compromised Employee Credential Stats](/reference/cti/compromised-employee-credential-stats/) | `/cti/compromised-employee-credentials/stats` |
| GET | [Compromised Employee Credential Status Stats](/reference/cti/compromised-employee-credential-status-stats/) | `/cti/compromised-employee-credentials/stats/status` |

## Compromised Client Credentials

Leaked credentials of your customers on your services.

| Method | Endpoint | Path |
|---|---|---|
| POST | [Compromised Client Credential Search](/reference/cti/compromised-client-credential-search/) | `/cti/compromised-client-credentials/search` |
| POST | [Compromised Client Credential Export](/reference/cti/compromised-client-credential-export/) | `/cti/compromised-client-credentials/search:export` |
| POST | [Compromised Client Credential Accept Risk](/reference/cti/compromised-client-credential-accept-risk/) | `/cti/compromised-client-credentials/search:accept-risk` |
| POST | [Compromised Client Credential Ignore](/reference/cti/compromised-client-credential-ignore/) | `/cti/compromised-client-credentials/search:ignore` |
| POST | [Compromised Client Credential Mark False Positive](/reference/cti/compromised-client-credential-mark-false-positive/) | `/cti/compromised-client-credentials/search:mark-false-positive` |
| POST | [Compromised Client Credential Mark Resolved](/reference/cti/compromised-client-credential-mark-resolved/) | `/cti/compromised-client-credentials/search:mark-resolved` |
| POST | [Compromised Client Credential Revert](/reference/cti/compromised-client-credential-revert/) | `/cti/compromised-client-credentials/search:revert` |
| GET | [Compromised Client Credential Stats](/reference/cti/compromised-client-credential-stats/) | `/cti/compromised-client-credentials/stats` |

## Compromised Payment Credentials

Leaked payment card data related to your organization.

| Method | Endpoint | Path |
|---|---|---|
| POST | [Compromised Payment Credential Search](/reference/cti/compromised-payment-credential-search/) | `/cti/compromised-payment-credentials/search` |
| POST | [Compromised Payment Credential Export](/reference/cti/compromised-payment-credential-export/) | `/cti/compromised-payment-credentials/search:export` |
| GET | [Compromised Payment Credential Detail](/reference/cti/compromised-payment-credential-detail/) | `/cti/compromised-payment-credentials/{credential_id}` |
| POST | [Compromised Payment Credential Accept Risk](/reference/cti/compromised-payment-credential-accept-risk/) | `/cti/compromised-payment-credentials/search:accept-risk` |
| POST | [Compromised Payment Credential Ignore](/reference/cti/compromised-payment-credential-ignore/) | `/cti/compromised-payment-credentials/search:ignore` |
| POST | [Compromised Payment Credential Mark False Positive](/reference/cti/compromised-payment-credential-mark-false-positive/) | `/cti/compromised-payment-credentials/search:mark-false-positive` |
| POST | [Compromised Payment Credential Mark Resolved](/reference/cti/compromised-payment-credential-mark-resolved/) | `/cti/compromised-payment-credentials/search:mark-resolved` |
| POST | [Compromised Payment Credential Revert](/reference/cti/compromised-payment-credential-revert/) | `/cti/compromised-payment-credentials/search:revert` |
| GET | [Compromised Payment Credential Stats](/reference/cti/compromised-payment-credential-stats/) | `/cti/compromised-payment-credentials/stats` |

## Compromised Devices

Infected devices (infostealer logs) linked to your employees.

| Method | Endpoint | Path |
|---|---|---|
| POST | [Compromised Device Search](/reference/cti/compromised-device-search/) | `/cti/compromised-devices` |
| GET | [Compromised Device Detail](/reference/cti/compromised-device-detail/) | `/cti/compromised-devices/{compromised_employee_device_id}` |

## Threat Actors

Threat actors and what they target.

| Method | Endpoint | Path |
|---|---|---|
| POST | [Threat Actor Search](/reference/cti/threat-actor-search/) | `/cti/threat-actors/search` |
| GET | [Threat Actor Detail](/reference/cti/threat-actor-detail/) | `/cti/threat-actors/{threat_actor_id}` |
| GET | [Most Actor Hosting Countries by Threat Actors](/reference/cti/most-actor-hosting-countries-by-threat-actors/) | `/cti/threat-actors/stats/most-actor-hosting-countries` |
| GET | [Most Targeted Countries by Threat Actors](/reference/cti/most-targeted-countries-by-threat-actors/) | `/cti/threat-actors/stats/most-targeted-countries` |
| GET | [Most Targeted Industries by Threat Actors](/reference/cti/most-targeted-industries-by-threat-actors/) | `/cti/threat-actors/stats/most-targeted-industries` |
| GET | [Most Targeted Organizations by Threat Actors](/reference/cti/most-targeted-organizations-by-threat-actors/) | `/cti/threat-actors/stats/most-targeted-organizations` |
| GET | [Most Used CVEs by Threat Actors](/reference/cti/most-used-cves-by-threat-actors/) | `/cti/threat-actors/stats/most-used-cves` |
| GET | [Most Used Tools by Threat Actors](/reference/cti/most-used-tools-by-threat-actors/) | `/cti/threat-actors/stats/most-used-tools` |

## Security News

Curated cybersecurity news.

| Method | Endpoint | Path |
|---|---|---|
| POST | [Security News Search](/reference/cti/security-news-search/) | `/cti/news/search` |
| GET | [Security News Detail](/reference/cti/security-news-detail/) | `/cti/news/{id}` |