The basics

Customer events are paginated with page and limit; limit is at most 100. The event list returns no page information — if fewer records than limit come back, you are on the last page.

GET /v1/leak-events?type=customer&page=2&limit=50

Intelligence 360 uses the Infostealer Detection endpoints with type=customer: it returns only customer (end-user) events.

Successful responses carry success, message and data; lists come inside data with pagination info.

{
  "success": true,
  "data": { "events": [ ... ] }
}