Track customer leaks
List credentials for your service seen on your end users’ infected machines, and track the totals.
List customer events
360 uses the Corporate event endpoints with type=customer. Date and sort filters are the same, and so is pagination: when fewer events than limit come back, you are on the last page.
curl -G "https://api.darkradar.com/api/public/v1/leak-events" \ -H "x-api-key: $DARKRADAR_API_KEY" \ --data-urlencode "type=customer" \ --data-urlencode "startDate=2026-09-01T00:00:00Z" \ --data-urlencode "limit=100"
If 360 is not enabled for your firm, customer events never appear: the list is empty, they are not counted, and a customer event requested by id returns
404.Track the totals
The statistics endpoint gives the customer event total and the date of the latest customer event; one call feeds your dashboard. Example response, shortened:
curl -G "https://api.darkradar.com/api/public/v1/leak-events/statistics" \ -H "x-api-key: $DARKRADAR_API_KEY"
{
"success": true,
"data": {
"statistics": {
"organizationTotal": 1,
"customerTotal": 0,
"lastCustomerEvent": {
"date": null,
"daysAgo": null
}
}
}
}