{
  "type": "bundle",
  "id": "bundle--7b645b0b-09cf-5d1f-88a3-a52337ab8d29",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--34a58ecd-e615-5d1e-8c5f-f28070d27a29",
      "created": "2026-10-30T14:19:15.350445+00:00",
      "modified": "2026-10-30T14:19:15.350445+00:00",
      "x_ally_original_id": "org:22bc0bd2-c3f4-4cf6-8517-d61b531be1f3",
      "name": "Amplitude",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--7cc78155-2ba0-5d16-837d-d0cd554d2777",
      "created": "2026-10-30T14:19:15.350445+00:00",
      "modified": "2026-10-30T14:19:15.350445+00:00",
      "x_ally_original_id": "inc:73154ea9-18f5-48a1-b9de-43d49dc2228f",
      "name": "Amplitude internal-systems event-data incident"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--c23826e6-6889-542a-8629-67d8bd714c5f",
      "created": "2026-10-30T14:19:15.350445+00:00",
      "modified": "2026-10-30T14:19:15.350445+00:00",
      "x_ally_original_id": "brh:377b2a98-cace-4107-985e-b91a6ac335d8",
      "name": "Amplitude internal-systems event-data incident"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--4d5fd567-3cb0-5c11-803e-6c5da0954f7e",
      "created": "2026-10-30T14:19:15.350445+00:00",
      "modified": "2026-10-30T14:19:15.350445+00:00",
      "x_ally_original_id": "clm:da588ac1-96cd-410c-b1fa-4ef2eec207cb",
      "relationship_type": "affected-organization",
      "source_ref": "incident--7cc78155-2ba0-5d16-837d-d0cd554d2777",
      "target_ref": "identity--34a58ecd-e615-5d1e-8c5f-f28070d27a29",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Amplitude",
          "url": "https://trust.amplitude.com/updates",
          "external_id": "cit:338f4dbd-1d3b-43aa-995b-cc923ba2c386",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:12c3247ab739e974937088d5e82033dfa582e9763521545e05817cb5af85879c"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--5203f340-b567-5014-8556-22d6254d0218",
      "created": "2026-10-30T14:19:15.350445+00:00",
      "modified": "2026-10-30T14:19:15.350445+00:00",
      "x_ally_original_id": "clm:8254ff16-0f91-4d41-b2f8-dd69937c51de",
      "relationship_type": "resulted-in",
      "source_ref": "incident--7cc78155-2ba0-5d16-837d-d0cd554d2777",
      "target_ref": "x-ally-event--82944cd0-db4b-59bc-88d4-ba3dc4adf31b",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Amplitude",
          "url": "https://trust.amplitude.com/updates",
          "external_id": "cit:4ea22bee-83e2-4e70-89d5-a18e601b7c23",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:12c3247ab739e974937088d5e82033dfa582e9763521545e05817cb5af85879c"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--9b9af0a1-4c4f-5e71-8dd1-ad39471f75ba",
      "created": "2026-10-30T14:19:15.350445+00:00",
      "modified": "2026-10-30T14:19:15.350445+00:00",
      "x_ally_original_id": "clm:33e7b787-1d0d-4fd7-82ac-94ae7eb2c193",
      "relationship_type": "resulted-in",
      "source_ref": "incident--7cc78155-2ba0-5d16-837d-d0cd554d2777",
      "target_ref": "x-ally-event--2baa535d-4bbf-5a64-8fae-705d51e70004",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Amplitude",
          "url": "https://trust.amplitude.com/updates",
          "external_id": "cit:b724d94c-dbce-4841-aafa-19c13d23ca66",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:12c3247ab739e974937088d5e82033dfa582e9763521545e05817cb5af85879c"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--13d9de0f-2606-5c91-8f43-98d747374413",
      "created": "2026-10-30T14:19:15.350445+00:00",
      "modified": "2026-10-30T14:19:15.350445+00:00",
      "x_ally_original_id": "clm:8e83fe81-5812-408f-a870-61e75c96dc3c",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Amplitude",
          "url": "https://trust.amplitude.com/updates",
          "external_id": "cit:ecc926ef-4f39-494b-818c-2a4e66a6acb1",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:12c3247ab739e974937088d5e82033dfa582e9763521545e05817cb5af85879c"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Amplitude said it detected, contained and remediated unauthorized access to a localized portion of its internal systems on September 28, 2026."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--3d75148f-b20d-5f51-8ac6-37c356e2da34",
      "created": "2026-10-30T14:19:15.350445+00:00",
      "modified": "2026-10-30T14:19:15.350445+00:00",
      "x_ally_original_id": "clm:7e3c0528-a06a-4897-bb82-a0c71281b1f2",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Amplitude",
          "url": "https://trust.amplitude.com/updates",
          "external_id": "cit:1b1853fc-e5fc-4843-b7d3-8e51f053dd05",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:12c3247ab739e974937088d5e82033dfa582e9763521545e05817cb5af85879c"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-09-28"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--84700fb6-431a-587c-872a-7dce45e79ba2",
      "created": "2026-10-30T14:19:15.350445+00:00",
      "modified": "2026-10-30T14:19:15.350445+00:00",
      "x_ally_original_id": "clm:87050700-74e3-4cac-93f7-3daa862a221b",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Amplitude",
          "url": "https://trust.amplitude.com/updates",
          "external_id": "cit:ec8bf180-2aff-46d9-99e9-a066db41b2af",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:12c3247ab739e974937088d5e82033dfa582e9763521545e05817cb5af85879c"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-28"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--b3a90d5b-6547-5206-863b-2d55d59c7cf0",
      "created": "2026-10-30T14:19:15.350445+00:00",
      "modified": "2026-10-30T14:19:15.350445+00:00",
      "x_ally_original_id": "clm:2c14a3fe-45e1-4bd9-a42e-343ddc0a4a98",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Amplitude",
          "url": "https://trust.amplitude.com/updates",
          "external_id": "cit:abb06f2c-1601-4686-a041-9f2f80543c88",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:12c3247ab739e974937088d5e82033dfa582e9763521545e05817cb5af85879c"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Amplitude explicitly separated this incident from the recent PHP and Node.js vulnerabilities named in its notice; no initial-access mechanism or actor was disclosed."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--d611ca99-a408-5998-85b9-231601f04192",
      "created": "2026-10-30T14:19:15.350445+00:00",
      "modified": "2026-10-30T14:19:15.350445+00:00",
      "x_ally_original_id": "clm:8152de0a-ad15-4be5-91b3-318505235526",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Amplitude",
          "url": "https://trust.amplitude.com/updates",
          "external_id": "cit:eccc4623-b32c-4954-be33-505737c1c054",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:12c3247ab739e974937088d5e82033dfa582e9763521545e05817cb5af85879c"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The incident affected event data belonging to less than 0.3% of customer accounts. This percentage is not a count of end users or records."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--e414a6b2-1b96-5fe6-8214-8b6b9b6382c9",
      "created": "2026-10-30T14:19:15.350445+00:00",
      "modified": "2026-10-30T14:19:15.350445+00:00",
      "x_ally_original_id": "clm:f7ca9621-f383-4208-b308-a595a3da2432",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Amplitude",
          "url": "https://trust.amplitude.com/updates",
          "external_id": "cit:43042aaf-b99d-42f5-865f-503e1963f013",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:12c3247ab739e974937088d5e82033dfa582e9763521545e05817cb5af85879c"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Amplitude contacted affected customers and continued assessing impact with an independent forensics firm. It said no end-user information was exposed for its other customers."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--efd9f3cb-539b-538c-8b8c-0e9bb06f7ef6",
      "created": "2026-10-30T14:19:15.350445+00:00",
      "modified": "2026-10-30T14:19:15.350445+00:00",
      "x_ally_original_id": "clm:a60d569b-bb23-4d78-975b-fb4b894b106e",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Amplitude",
          "url": "https://trust.amplitude.com/updates",
          "external_id": "cit:a4872a60-cac0-4922-a1ee-5cafda0b7e0e",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:12c3247ab739e974937088d5e82033dfa582e9763521545e05817cb5af85879c"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-09-28"
      }
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--2baa535d-4bbf-5a64-8fae-705d51e70004",
      "created": "2026-10-30T14:19:15.350445+00:00",
      "modified": "2026-10-30T14:19:15.350445+00:00",
      "x_ally_original_id": "evt:c8551686-1f94-4d2d-8247-ffc5655bae69",
      "name": "Customer security update published"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--82944cd0-db4b-59bc-88d4-ba3dc4adf31b",
      "created": "2026-10-30T14:19:15.350445+00:00",
      "modified": "2026-10-30T14:19:15.350445+00:00",
      "x_ally_original_id": "evt:ecd41243-b6b1-4fcb-b62c-84dd5eb15f57",
      "name": "Unauthorized access detected and remediated"
    }
  ]
}