GET: 4th Party Public Disclosure Affected Companies – Bitsight Knowledge Base

https://api.bitsighttech.com/ratings/v2/alerts/alert_guid/affected-companies

Get companies that were indirectly affected by a 4th party Public Disclosure.

Available for Third Party Risk Management.

Parameters

* Required.

Parameter	Values
guid * [Path] Identify the 4th party Security Incident alert to query.	[Integer] The unique identifier [`alert_guid`] of a 4th Party Security Incident alert. See GET: Alerts.
limit [Query] Set the maximum number of results. The results might include fewer records (even zero), but not more.	[Integer] ↻ `32` (default)
offset [Query] Set the starting point of the return.	[Integer] `0` (zero) = Start from the first record in the result set.
q [Query] Perform a full-text search for matching records on all searchable fields.	[String]

Example Request

curl https://api.bitsighttech.com/ratings/v2/alerts/24990834/affected-companies -u api_token:

Example Response

{
  "guid": "24990834",
  "alert_type": "PUBLIC_DISCLOSURE",
  "alert_date": "2020-06-04",
  "start_date": "2020-06-03",
  "company_name": "Saperix",
  "company_guid": "35fbbd59-6bae-87ba-22418b40a6bb",
  "company_url": "/company/35fbbd59-6bae-87ba-22418b40a6bb/",
  "folder_guid": "45bc7bi4-fold-4a39-a81e-8b37c2b3ba2f",
  "folder_name": "Total Risk Monitoring"
  "severity": "CRITICAL",
  "trigger": "Patching Cadence",
  "details": {
    "category": "General Security Incident",
    "message": "Perix, SA disclosed the personal information of an unknown number of individuals to an unauthorized third party.",
    "subcategory": "Human Error",
    "is_direct": false,
    "severity": 0,
    "discovery_date": "2020-06-04",
    "effective_date": "2020-06-03",
    "public_disclosure_guid": "45bc7bi4-fold-4a39-a81e-8b37c2b3ba2f",
    "origin_type": "subsidiary",
    "origin_company":{
      "guid": "45bc7bi4-4a39-sube-8b37c2b3ba2f",
      "name": "Perix, SA",
      "display_url": "/company/45bc7bi4-4a39-sube-8b37c2b3ba2f/",
      "is_subscribed": false,
    },
  }
}

Response Attributes

Field			Description
guid String [`alert_guid`]			The unique identifier of this alert.
alert_type String			The conditions that triggered the alert. See alert categories.
alert_date String [`YYYY-MM-DD`]			The date when the alert is generated.
start_date String [`YYYY-MM-DD`]			The start date of the alert period.
company_name String			The name of the company that triggered the alert.
company_guid String [`entity_guid`]			The unique identifier of the company that the alert was generated for.
company_url String			The URL path to this company’s Overview page in the Continuous Monitoring application.
folder_guid String [`folder_guid`]			The unique identifier of the folder for which the alert was created. This is your “All Companies” folder if the company was not in a specific folder.
folder_name String			The name of this folder.
severity String			The level of change that generated this alert. See change severity.
trigger String			The type of data that generated this alert.
details Object			The alert details.
	category String		The Security Incident category. See: Breach Security Incident General Security Incident Other Disclosure
	message String		A description of the Public Disclosure that triggered this alert.
	subcategory String		The Security Incident type. See: Breach Security Incident Types General Security Incident Types Other Disclosure Types
	is_direct Boolean		`true` = This company was the original target within a multiparty event.
	severity Integer		The severity of the Public Disclosures event. Values: `0` = Informational `1` = Minor `2` = Moderate `3` = Severe
	discovery_date String [`YYYY-MM-DD`]		The earliest date when information pertaining to the security incident or self-discovery date became publicly available or when affected parties were notified.
	effective_date String [`YYYY-MM-DD`]		The date when a Security Incident event was recorded in the Bitsight platform.
	public_disclosure_guid String [`breach_guid`]		The Public Disclosure’s unique identifier.
	origin_type String		The Public Disclosure origin type. Values: `direct` `subsidiary` `third-party`
	origin_company Object		The origin company’s details.
		guid String [`entity_guid`]	This company’s unique identifier.
		name String	This company’s name.
		display_url String	The URL path to this company’s Overview page in the Continuous Monitoring application.
		is_subscribed Boolean	`true` = You are subscribed to this company.

Status Codes

Code	Description
`200 – Okay`	Everything worked as expected.
`404 – Not Found`	The specified resource could not be found.
`422 – Not Processed`	The request could not be processed.

April 25, 2023: Published.

Parameters

Example Request

Example Response

Response Attributes

Status Codes

Related articles