A method includes: obtaining, at a server, a diagnosis key published by a tracing service, the diagnosis key associated with a source device; identifying one or more detected proximity identifiers associated with the diagnosis key; identifying one or more affected network detection devices associated with the one or more detected proximity identifiers; retrieving, from a repository, device data for the one or more affected network devices, the device data identifying a facility of the one or more affected network devices; and generating facility exposure data for the facility, the facility exposure data defining exposure associated with the source device at the facility.