---
description: Breach Data
---

# breach\_data

This dataset contains raw data derived from database breaches. This includes both public breaches and those leaked on the deep or dark web. Breach\_data is a raw collection meaning the data is unparsed and unsanitized. The type of data depends on the breach. For example, some may list an email and password combination while others may just have PII such as names and addresses.

| Field              | Description                                                                           |
| ------------------ | ------------------------------------------------------------------------------------- |
| breach\_date       | date the breach data was originally observed                                          |
| breach\_line\_data | raw data from a line in the source file – usually a username and password combination |
| breach\_name       | name of the breach if known                                                           |
| etl\_date          | date data was exported                                                                |
| first\_seen        | same as breach date                                                                   |
| last\_seen         | date breach data was last observed                                                    |
| raw\_data\_file    | name of the raw file containing the breach data                                       |
