Generating data clusters with customizable analysis strategies

A non-transitory computer-readable storage medium storing computer-executable instructions that, when executed by a computer system, configure the computer system to perform operations comprising:

• communicating with one or more electronic data stores storing a plurality of data entities and respective data entity attributes, the plurality of data entities related to financial data and including at least one of:
• an account data entity,
• a transaction data entity,
• a customer data entity, or
• a phone number data entity;
• retrieving, from the one or more electronic data stores, a seed data entity selected from the plurality of data entities;
• adding the seed data entity to a data entity cluster;
• identifying at least one data entity attribute associated with the seed data entity;
• determining, based on a cluster strategy and the at least one data entity attribute, one or more additional data entities related to the seed data entity, wherein the cluster strategy is configured to identify related data entities for detection of possible fraudulent financial activity, wherein the cluster strategy includes one or more search protocols, and wherein determining one or more additional data entities related to the seed data entity comprises:
• executing at least one search protocol on the one or more electronic data stores to access particular data entities;
• and
• evaluating the particular data entities returned by the at least one search protocol to identify one or more additional data entities for inclusion in the data entity cluster, the one or more additional data entities sharing the at least one data entity attribute with the seed data entity;
• and
• adding, based on the cluster strategy, the one or more additional data entities to the data entity cluster,
• wherein the data entity cluster is useable by an analyst to determine various data entities related to each other and to possible fraudulent financial activity,
• wherein a first search protocol returns particular data entities that are used as data parameter inputs to a second search protocol.

A computer system comprising:

• one or more non-transitory computer readable storage devices configured to store one or more software programs;
• and
• one or more hardware computer processors in communication with the one or more non-transitory computer readable storage devices and configured to execute the one or more software programs in order to cause the computer system to:
• communicate with one or more electronic data stores storing a plurality of data entities and respective data entity attributes, the plurality of data entities related to financial data and including at least one of:
• an account data entity,
• a transaction data entity,
• a customer data entity, or
• a phone number data entity;
• retrieve, from the one or more electronic data stores and by the one or more hardware computer processors, a seed data entity selected from the plurality of data entities;
• add, by the one or more hardware computer processors, the seed data entity to a data entity cluster;
• identify, by the one or more hardware computer processors, at least one data entity attribute associated with the seed data entity;
• determine, by the one or more hardware computer processors and based on a cluster strategy and the at least one data entity attribute, one or more additional data entities related to the seed data entity, wherein the cluster strategy is configured to identify related data entities for detection of possible fraudulent financial activity, wherein the cluster strategy includes one or more search protocols, and wherein determining one or more additional data entities related to the seed data entity comprises:
• executing at least one search protocol on the one or more electronic data stores to access particular data entities;
• and
• evaluating the particular data entities returned by the at least one search protocol to identify one or more additional data entities for inclusion in the data entity cluster, the one or more additional data entities sharing the at least one data entity attribute with the seed data entity;
• and
• add, by the one or more hardware computer processors and based on the cluster strategy, the one or more additional data entities to the data entity cluster,
• wherein the data entity cluster is useable by an analyst to determine various data entities related to each other and to possible fraudulent financial activity,
• wherein a first search protocol returns particular data entities that are used as data parameter inputs to a second search protocol.