---
title: ":: Legacy Route :: This resource returns a collection of `DataLossEvent` objects."
method: GET
path: "/v1/data_loss_events/{toe_id}"
tags: ["Data Loss Events"]
---

# :: Legacy Route :: This resource returns a collection of `DataLossEvent` objects.

`GET /v1/data_loss_events/{toe_id}`

"::Legacy Route please use portfolio_data_loss_events:: This resource returns a collection of `DataLossEvent` objects for a given TOE id. This are referred to as Breach Events in the RiskRecon site."

## Path parameters

- `toe_id` string, required

## Response `200`

OK

- DataLossEvent[] — A collection of Data Loss Events.
  - `uuid` string, uuid, nullable — The unique identifier for a data loss event.
  - `updated_at` string — The date a data loss event was updated.
  - `toe_id` string, uuid — The unique identifier for the Target Of Evaluation (TOE).
  - `threat_vector` string — The threat vector associated with the Data Loss or Breach event.
  - `threat_actor` string — The threat actor if available.
  - `threat_action` string — The threat action if available.
  - `records_exposed` string — The number of records exposed if applicable.
  - `public_date` string — The date the breach was made public.
  - `data_loss_event_source_url` string — Source url for the Data Loss Event.
  - `data_loss_event_long_desc` string — A long description of data loss event.
  - `created_at` string — The date the data loss event was created.
  - `compromised_info` string[]
  - `breach_date` string — The date of the breach.

## Other responses

- `401` — Authentication information was missing or invalid or the user is not authorized to access resource or perform the associated action.
- `403` — FORBIDDEN
- `404` — The URI didn't match an existing resource.

---

[API](https://skmtc.dev/recordedfuture/apis/alert-api.md) · [All operations](https://skmtc.dev/recordedfuture/apis/alert-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/recordedfuture/alert-api/revisions/c8c2f68d8b60/schema)