> ## Documentation Index
> Fetch the complete documentation index at: https://docs.blinkops.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Get Alert Compromised Credentials

Get the compromised credentials of a specified alert, as CSV.

The credentials are not part of the alert details. ZeroFox provides them as a separate breach file, which this action returns.

To work with the credentials as JSON, pass the output of this action to the `Convert CSV To JSON` action.

**Note:** The request fails with a `404` status code when the alert has no compromised credentials.

> [!NOTE]
>
> External Documentation
>
> To learn more, visit the [ZeroFox documentation](https://api.zerofox.com/2.0/docs/).

## Parameters

| Parameter | Description |
| - | - |
| Alert ID | The ID of the alert. You can get alert IDs using the `List Alerts` action. |

## Example Output

```json theme={"dark"}
domain,email,username,password,breach_name,impacted_domain,discovered_date,created_date
example.com,user@example.com,user@example.com,password123,"Combolist: 'paste.services.txt' (202,998 Records)",N/A,2024-05-27T00:00:00Z,2024-05-27T23:20:24.288508611Z
```

## Workflow Library Example

[Get Alert Compromised Credentials with Zerofox and Send Results Via Email](https://library.blinkops.com/workflows/get-alert-compromised-credentials-with-zerofox-and-send-results-via-email)

![Workflow Library](https://mintcdn.com/blinkops-2/ojHYuDeYX5FWuN8a/img/Icons/play-box.svg?fit=max\&auto=format\&n=ojHYuDeYX5FWuN8a\&q=85\&s=b8af968e71438a9499c3223c9bd29fb2)

Preview this Workflow on desktop

[https://library.blinkops.com/workflows/get-alert-compromised-credentials-with-zerofox-and-send-results-via-email/canvas](https://library.blinkops.com/workflows/get-alert-compromised-credentials-with-zerofox-and-send-results-via-email/canvas)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.