---
title: "Get Breach Incident"
method: GET
path: "/breach/incidents/{breach_id}"
tags: ["data-breach", "data-breach"]
---

# Get Breach Incident

`GET /breach/incidents/{breach_id}`

Get detailed information about a breach incident (admin only)

## Path parameters

- `breach_id` string, required

## Headers

- `authorization` string, nullable

## Response `200`

Successful Response

- BreachIncidentDetailResponse
  - `id` string, uuid, required
  - `breach_type` string, required
  - `description` string, required
  - `detected_at` string, date-time, required
  - `severity` string, required
  - `risk_level` string, nullable
  - `status` string, required
  - `estimated_users_affected` integer, required
  - `authority_notified_at` string, date-time, nullable
  - `users_notified_at` string, date-time, nullable
  - `occurred_at` string, date-time, nullable
  - `data_types_affected` string[]
  - `systems_affected` string[]
  - `risk_assessment` object, nullable
  - `containment_measures` object, nullable
  - `remediation_actions` object, nullable
  - `breach_metadata` object, nullable

## Other responses

- `422` — Validation Error

---

[API](https://skmtc.dev/fluentea/apis/aurqa-language-learning-platform-refactored.md) · [All operations](https://skmtc.dev/fluentea/apis/aurqa-language-learning-platform-refactored/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/fluentea/aurqa-language-learning-platform-refactored/revisions/ebade541eaa4/schema)