Real-time Data Breach Monitor with Have I Been Pwned

This workflow automates real-time monitoring of data breaches using the Have I Been Pwned (HIBP) API, polling every 15 minutes without needing an API key. It fetches the latest breach data, compares it against a cached version stored in a simple JSON file to identify new entries, and only proceeds with notifications for genuinely new breaches, preventing alert fatigue.

Key benefits include proactive identity protection for individuals and teams, automated awareness for security professionals and developers, and a demonstration of lightweight caching for stateful workflows. It's efficient, requiring minimal setup, and serves as a template for similar monitoring tasks.

Use cases span personal cybersecurity vigilance, enterprise security dashboards, DevOps breach tracking, and educational demos of n8n's caching patterns. Customize by adding nodes like Email, Slack, or Discord after the 'New breach' trigger for tailored notifications—all breach details are readily available.

Setup is straightforward: import the workflow, ensure file access for cache.json, and attach your preferred alert mechanism. The cache logic reads prior data, compares breach names or IDs, updates on changes, ensuring reliable, spam-free operation.