DEVELOPER ACCESS

Static JSON API Documentation (v1)

Programmatic access to verified case records, MITRE ATT&CK mappings, and court docket metadata via fast, immutable static JSON files.

Key Facts

  • Zero authentication required: all datasets are static JSON files served via CDN.
  • CORS headers enabled globally (Access-Control-Allow-Origin: *).
  • ATT&CK Navigator v4.5 layers available for every documented case.
  • All primary data fields are guaranteed to match schema definitions.

Available Endpoints

All Cases Summary

View JSON ↗
GET /data/cases.json

Summary array of all 46 cases including slug, title, court, victim sector, financial loss, and technique counts.

Individual Case Detail

View JSON ↗
GET /data/cases/{slug}.json

Full case record including chronological timeline events, defendants, CVEs, and complete technique mappings with verbatim excerpts.

ATT&CK Navigator Layer

View JSON ↗
GET /data/layers/{slug}.json

Valid MITRE ATT&CK Navigator v4.5 layer JSON formatted for direct import into the official MITRE Navigator tool.

ATT&CK Techniques Matrix

View JSON ↗
GET /data/techniques.json

Full list of 65 techniques with parent/sub-technique links, tactic assignments, and linked case slugs.

Threat Actors & Syndicates

View JSON ↗
GET /data/actors.json

Threat groups with official attribution sources, known aliases, country attribution, and associated techniques.

Defendants & Indictments

View JSON ↗
GET /data/defendants.json

Named individuals with nationality, birth year, legal status, prison sentence duration in months, and restitution orders.

Criminal Statutes

View JSON ↗
GET /data/statutes.json

Federal statutory offenses (e.g. 18 U.S.C. § 1030) with legal summaries and associated case counts.

SEC Form 8-K Disclosures

View JSON ↗
GET /data/filings.json

Mandatory Item 1.05 cybersecurity incident disclosures filed with the Securities and Exchange Commission.

OFAC Sanctions Designations

View JSON ↗
GET /data/sanctions.json

Treasury Department cyber-related designations under Executive Orders and sanctions programs.

Aggregated Statistics

View JSON ↗
GET /data/stats.json

Sentence distribution ranges, average prison terms, sector counts, and case status counts.

HTTP Headers and Caching

All endpoints return standard MIME type application/json; charset=utf-8. JSON datasets are deployed with immutable cache-control headers on static CDN edge nodes, guaranteeing rapid delivery and high availability.