Automate Data Breach Alerts from Haveibeenpwned.com

Target Audience

• Security Analysts: Professionals monitoring data breaches for organizations.
• IT Administrators: Individuals responsible for maintaining data security and user privacy.
• Developers: Those looking to automate alerts for new data breaches in applications.
• Small Business Owners: Entrepreneurs who want to stay informed about potential threats to their customer data.
• Tech Enthusiasts: Individuals interested in learning about automation and data protection workflows.

Problem Solved

This workflow addresses the challenge of staying updated on data breaches that could affect users. By automating the monitoring of breaches from haveibeenpwned.com, it ensures that users receive timely alerts about new breaches, enabling them to take necessary actions to secure their data and protect their privacy.

Workflow Steps

1. Trigger: The workflow begins either manually via a Test workflow button or automatically on a 15-minute schedule.
2. Request Breaches: It sends an HTTP request to haveibeenpwned.com to retrieve the latest breaches.
3. Read Last Breach: The workflow reads the last notified breach from a local cache file (./cache.json).
4. Check for New Breach: It compares the latest breach with the last notified one:
   • If it’s a new breach, it proceeds to set the breach name and send an alert.
   • If it’s an old breach, it skips the alert.
5. Update Cache: The workflow updates the cache file with the new breach information if applicable.
6. File Operations: It handles JSON file conversions and writes the latest breach data to the cache file.
7. Alerts: If a new breach is detected, the workflow triggers alerts (e.g., via Slack or email).