Delete Data

ThreatExchange currently supports deletion for ThreatDescriptor objects and relationships between ThreatIndicator objects. Some objects may also be given an expiration time, which will cause data to be deleted automatically within 90 days of the expiration.

You can delete a ThreatDescriptor using the API with a DELETE HTTP request:


After a subjective ThreatDescriptor is deleted, the objective ThreatIndicator may still exist.

To delete a relationship between ThreatIndicators using the API:


We do not support deletes for Tags.