{"success":true,"data":{"id":"data-breach-account-notification-phish","label":"Data breach account notification phishing","description":"Email claims the recipient's email, account, or credentials were found in a data breach and prompts them to click a link to \"secure\" or \"verify\" their account — credential harvesting disguised as a breach alert; legitimate breach notification services (HaveIBeenPwned, corporate disclosures) inform users without asking them to enter passwords via a link as a remediation step; the combination of breach-claim language and an immediate click-to-act CTA is a high-precision phishing indicator.","tier":"danger","category":"phishing","isThin":false}}