1. An apparatus comprising instructions stored on non-transitory, computer-readable media, the instructions when executed to cause at least one computer to: receive information representing a possible threat to a first network; receive information representing a profile associated with the first network; access a stored database having records of possible threats to multiple, diverse networks; access a stored database having information representing profiles associated with respective, diverse networks; determine from the records a correlation of the possible threat to the first network with possible threats to a subset of one or more of the respective, diverse networks, the subset restricted to be one or more of the respective, diverse networks which, according to the stored database having the information, are associated with profiles that match the profile associated with the first network in at least one characteristic; transmit a notification message to a destination associated with a second network from the subset to identify the possible threat to the first network; and sanitize information conveyed by the notification message to the destination, by formatting said notification message in a manner to remove IP addresses corresponding to one or more of (i) the first network or (ii) one of the respective, diverse networks from information included in the notification message that represents one or more possible threats to one or more of (i) the first network or (ii) one of the respective, diverse networks.