Dynamic record identification and analysis computer system with event monitoring components

A method, comprising:

• at a computing platform comprising at least one processor, a communication interface, and memory:
• receiving, by the at least one processor, account reconnaissance data identifying a first plurality of user accounts that have experienced at least one event associated with account security concern characteristics;
• based on receiving the account reconnaissance data identifying the first plurality of user accounts that have experienced at least one event associated with account security concern characteristics, analyzing, by the at least one processor, event history data associated with the first plurality of user accounts to identify one or more common interactions associated with a subset of the first plurality of user accounts;
• based on analyzing the event history data associated with the first plurality of user accounts to identify the one or more common interactions associated with the subset of the first plurality of user accounts, identifying, by the at least one processor, a point of compromise among the subset of the first plurality of user accounts, the point of compromise corresponding to a particular common interaction of the one or more common interactions, wherein identifying the point of compromise among the subset of the first plurality of user accounts comprises identifying the point of compromise among the subset of the first plurality of user accounts based on transaction history information associated with the subset of the first plurality of user accounts;
• based on identifying the point of compromise among the subset of the first plurality of user accounts, generating, by the at least one processor, a validation user interface for a user of an analyst computer system, the validation user interface comprising at least one user-selectable element of a plurality of user-selectable elements enabling the user of the analyst computer system to provide input validating the point of compromise identified by the computing platform;
• providing, by the at least one processor, via the communication interface, to the analyst computer system, the validation user interface generated for the user of the analyst computer system, wherein providing the validation user interface generated for the user of the analyst computer system to the analyst computer system causes the analyst computer system to display the validation user interface to the user of the analyst computer system;
• receiving, by the at least one processor, via the communication interface, from the analyst computer system, validation information indicating that the at least one user-selectable element of the plurality of user-selectable elements enabling the user of the analyst computer system to provide input validating the point of compromise identified by the computing platform has been selected by the user of the analyst computer system to validate the point of compromise identified by the computing platform;
• searching, by the at least one processor, enterprise user account records to identify a second plurality of user accounts that have at least one event associated with the point of compromise;
• based on searching the enterprise user account records to identify the second plurality of user accounts, adding, by the at least one processor, the second plurality of user accounts to an alert table;
• generating, by the at least one processor, one or more system configuration commands based on adding the second plurality of user accounts to the alert table;
• sending, by the at least one processor, via the communication interface, to an account management computer system, the one or more system configuration commands, wherein sending the one or more system configuration commands to the account management computer system causes the account management computer system to restrict transaction requests associated with the second plurality of user accounts processed by the account management computer system;
• and
• updating, by the at least one processor, merchant weighting information maintained by the computing platform in a merchant database maintained by the computing platform based on adding the second plurality of user accounts to the alert table, wherein updating the merchant weighting information comprises increasing or decreasing at least one weight applied to at least one specific merchant based on identifying the at least one specific merchant as the point of compromise.

One or more non-transitory computer-readable media storing instructions that, when executed by a computing platform comprising at least one processor, a communication interface, and memory, cause the computing platform to:

• receive account reconnaissance data identifying a first plurality of user accounts that have experienced at least one event associated with account security concern characteristics;
• based on receiving the account reconnaissance data identifying the first plurality of user accounts that have experienced at least one event associated with account security concern characteristics, analyze event history data associated with the first plurality of user accounts to identify one or more common interactions associated with a subset of the first plurality of user accounts;
• based on analyzing the event history data associated with the first plurality of user accounts to identify the one or more common interactions associated with the subset of the first plurality of user accounts, identify a point of compromise among the subset of the first plurality of user accounts, the point of compromise corresponding to a particular common interaction of the one or more common interactions, wherein identifying the point of compromise among the subset of the first plurality of user accounts comprises identifying the point of compromise among the subset of the first plurality of user accounts based on transaction history information associated with the subset of the first plurality of user accounts;
• based on identifying the point of compromise among the subset of the first plurality of user accounts, generate a validation user interface for a user of an analyst computer system, the validation user interface comprising at least one user-selectable element of a plurality of user-selectable elements enabling the user of the analyst computer system to provide input validating the point of compromise identified by the computing platform;
• provide, via the communication interface, to the analyst computer system, the validation user interface generated for the user of the analyst computer system, wherein providing the validation user interface generated for the user of the analyst computer system to the analyst computer system causes the analyst computer system to display the validation user interface to the user of the analyst computer system;
• receive, via the communication interface, from the analyst computer system, validation information indicating that the at least one user-selectable element of the plurality of user-selectable elements enabling the user of the analyst computer system to provide input validating the point of compromise identified by the computing platform has been selected by the user of the analyst computer system to validate the point of compromise identified by the computing platform;
• search enterprise user account records to identify a second plurality of user accounts that have at least one event associated with the point of compromise;
• based on searching the enterprise user account records to identify the second plurality of user accounts, add the second plurality of user accounts to an alert table;
• generate one or more system configuration commands based on adding the second plurality of user accounts to the alert table;
• send, via the communication interface, to an account management computer system, the one or more system configuration commands, wherein sending the one or more system configuration commands to the account management computer system causes the account management computer system to restrict transaction requests associated with the second plurality of user accounts processed by the account management computer system;
• and
• update merchant weighting information maintained by the computing platform in a merchant database maintained by the computing platform based on adding the second plurality of user accounts to the alert table, wherein updating the merchant weighting information comprises increasing or decreasing at least one weight applied to at least one specific merchant based on identifying the at least one specific merchant as the point of compromise.