The Flashpoint Card Fraud Mitigation (CFM) integration imports compromised payment card intelligence from the Flashpoint Fraud API into ThreatQ. The integration supports ingestion of both full-card and partial-card records, enabling organizations to identify payment cards exposed across illicit card shops and threat actor communities on the dark web. By bringing this intelligence into ThreatQ, security and fraud teams can investigate exposed payment cards, correlate them with other threat data, and respond more quickly to potential fraud. Full-card and partial-card records are processed separately to preserve the unique data and context provided by each record type.

The integration provides the following feed:

• Flashpoint CFM - Monitored Cards - ingests compromised card records from the Flashpoint Fraud API.

The integration ingests the following ThreatQ objects:

• Compromised Cards (custom object)
• Compromised Card Attributes