Examples of a data anomaly detection system are provided. The system may obtain a query and target data associated with a data anomaly detection requirement. The system may sort the target data into a plurality of data wedges comprising a plurality of events. The system may create a data pattern model for each of the plurality of data wedges. The system may identify a data threshold value and identify a data probity score for each of the plurality of events. The system may create a data probity index and identify a data anomaly cluster for the data pattern model. The system may generate a data anomaly detection result and initiate anomaly detection corresponding to the data anomaly detection requirement. The data anomaly detection result may include the data pattern model deficient of the data anomaly cluster relevant for resolution to the query.