{
  "type": "bundle",
  "id": "bundle--3e80e868-1f2c-5c9c-8164-1350a9db6415",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--cb057f9f-aaa4-5e69-866e-59148b412899",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "org:548dfadc-cde7-569b-8608-701c4e29fc00",
      "name": "Advance Auto Parts",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--1a397b29-45fc-5fc6-8d03-3263d8fe560a",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "inc:d1c2573d-27ee-53a2-a719-5f3de9db8845",
      "name": "Advance Auto Parts security incident"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--df50f19b-ec47-5581-85d5-2003ab3759b1",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "brh:beb7184b-9b8f-5ba6-a841-4904bd71eb11",
      "name": "Advance Auto Parts security incident"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--d7e3b943-59fa-5249-8685-28dbc15fa313",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "clm:93386763-21a8-505f-b57a-a658c23b2397",
      "relationship_type": "affected-organization",
      "source_ref": "incident--1a397b29-45fc-5fc6-8d03-3263d8fe560a",
      "target_ref": "identity--cb057f9f-aaa4-5e69-866e-59148b412899",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "U.S. District Court for the District of Montana",
          "url": "https://www.mtd.uscourts.gov/node/628",
          "external_id": "cit:2ca293eb-480c-5cd6-8245-5ac7c98cb4a2",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:2980480b8d29cd2699a7d6f1340022d5124b5dbf3210a3a428bbb3f663d6e5da"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--38d74eee-af75-5986-80b9-9a3300b8c00c",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:8179750a-1fa4-5547-8280-e490df210416",
      "confidence": 84,
      "external_references": [
        {
          "source_name": "U.S. District Court for the District of Montana",
          "url": "https://www.mtd.uscourts.gov/node/628",
          "external_id": "cit:9abd2a0e-7726-5281-bf79-8eacee7933f5",
          "description": "With Prejudice | 12/19/2025 | | | | +--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------------------------+ | | | | Order Granting Joint Motion to Dismiss Claims by Neiman Marcus Plantiffs Against Defendant Snowflake Inc.",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:2980480b8d29cd2699a7d6f1340022d5124b5dbf3210a3a428bbb3f663d6e5da"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Stolen credentials were used against a Snowflake customer account that did not enforce MFA."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--8b275489-6423-517a-8ce2-ce72644b3f5e",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:14923a17-4526-57e0-8ddc-074efcacf12e",
      "confidence": 90,
      "external_references": [],
      "x_ally_claim_object": {
        "kind": "iri",
        "value": "https://attack.mitre.org/techniques/T1078/"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--bb1b8f6d-b2f5-5930-85cd-58a3876da07d",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "clm:d4a356f5-3b17-557a-b906-62b67231125a",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "U.S. District Court for the District of Montana",
          "url": "https://www.mtd.uscourts.gov/node/628",
          "external_id": "cit:55a17e93-5065-5244-adce-262758e5a46f",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:2980480b8d29cd2699a7d6f1340022d5124b5dbf3210a3a428bbb3f663d6e5da"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The reviewed source documents the advance auto parts security incident involving Advance Auto Parts."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--dad2e639-ad6e-519c-8de7-b7f9e413a5f8",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:44f754f6-03cf-59f8-ba8d-ef766118e6cd",
      "confidence": 84,
      "external_references": [
        {
          "source_name": "U.S. District Court for the District of Montana",
          "url": "https://www.mtd.uscourts.gov/node/628",
          "external_id": "cit:02d0951f-77f7-56cb-a7b1-8644c4bb8ebc",
          "description": "Snowflake, Data Security Breach Litigation",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:2980480b8d29cd2699a7d6f1340022d5124b5dbf3210a3a428bbb3f663d6e5da"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Employee and customer data exposed."
      }
    }
  ]
}