Bulk Data Downloads & Developer Hub
All records in the Cyberattack Case Library are committed as open, machine-readable datasets. Download complete datasets in industry-standard formats for academic research, threat intelligence modeling, or compliance auditing.
Full Cases Archive (JSON)
Complete hierarchical archive of all 46 landmark cases, techniques, defendants, and legal citations.
OASIS STIX 2.1 Threat Intelligence Bundle
Compliant STIX 2.1 bundle ready for direct ingestion into OpenCTI, MISP, and enterprise SIEM platforms.
Spreadsheet Catalog (CSV)
Tabular format for Excel, Google Sheets, or pandas with docket numbers, court, loss, status, and actors.
Offline Research Database (SQLite)
Pre-packaged relational SQLite database file for local querying, data science, and offline auditing.
Known Exploited Vulnerabilities (CVE) Index
Index of active CVEs linked to federal criminal proceedings with CISA KEV dates and CVSS scores.
Ransom Demands & Crypto Recovery Dataset
Financial intelligence dataset documenting demands, corporate payments, and federal forfeiture seizures.
Developer API Integration Snippets
import requests
import pandas as pd
# Fetch complete cases dataset
url = "https://cyberattackcaselibrary.pages.dev/data/cases-all.json"
cases = requests.get(url).json()
# Load into DataFrame
df = pd.DataFrame(cases)
print(f"Loaded {len(df)} landmark cases.")
print(df[["title", "loss_amount_usd", "status"]].head())
# Extract all case titles with total loss amount exceeding $100M
curl -s https://cyberattackcaselibrary.pages.dev/data/cases-all.json | \
jq '.[] | select(.loss_amount_usd > 100000000) | {title, loss_amount_usd, status}'