{
  "type": "bundle",
  "id": "bundle--df6d095e-036b-5919-854e-81c52be48ea9",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--ef9a67c3-746c-5365-8909-058d0ff740d7",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "org:a00d71e2-0dd6-4cdf-8f3c-5e49371e2ee8",
      "name": "and ST HD Co., Ltd.",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--92a38612-9572-5e1e-8ac4-7df303014c32",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "brh:9931c21f-e44d-499a-9c24-7e741a7f322d",
      "name": "and ST HD business-server data incident"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--bd4cb4cb-2b24-5407-8184-fe503b167ae9",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "inc:fafbd460-66d7-45ff-b5fc-659defcb89c7",
      "name": "and ST HD business-server data incident"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--cfeb5b85-1518-52ba-8733-a3ce52bedcc7",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "clm:65bba5ef-a43e-49ec-b631-d4642b050f56",
      "relationship_type": "affected-organization",
      "source_ref": "incident--bd4cb4cb-2b24-5407-8184-fe503b167ae9",
      "target_ref": "identity--ef9a67c3-746c-5365-8909-058d0ff740d7",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "and ST HD",
          "url": "https://www.andst-hd.co.jp/news/notice/entry-17234/",
          "external_id": "cit:d29e997a-13bb-45c8-af70-8febc49f4790",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:120ec3100de8f08f56e05d0565d359de30ed53e4e2f4a048b273da569fe366ad"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--ef7955b8-2a35-5ed8-8269-e572c0ffe91b",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "clm:a34196e5-a96e-42d6-ad70-185225b88998",
      "relationship_type": "resulted-in",
      "source_ref": "incident--bd4cb4cb-2b24-5407-8184-fe503b167ae9",
      "target_ref": "x-ally-event--48b9d8fc-4363-5d63-82ae-c1c2dd41ffc7",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "and ST HD",
          "url": "https://www.andst-hd.co.jp/news/notice/entry-17234/",
          "external_id": "cit:711e9081-8096-40a7-8e90-11e9709c0a58",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:120ec3100de8f08f56e05d0565d359de30ed53e4e2f4a048b273da569fe366ad"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--f2df3d2d-ac3c-54b2-8cd8-57563b58f891",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "clm:cb003779-9ffb-426f-a1a9-9de0d8dabe56",
      "relationship_type": "resulted-in",
      "source_ref": "incident--bd4cb4cb-2b24-5407-8184-fe503b167ae9",
      "target_ref": "x-ally-event--23d57da1-2ac0-57ac-8c37-ca38dc87c772",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "and ST HD",
          "url": "https://www.andst-hd.co.jp/news/notice/entry-17234/",
          "external_id": "cit:bf32ff03-f92f-4b12-9a07-cc14e60bc507",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:120ec3100de8f08f56e05d0565d359de30ed53e4e2f4a048b273da569fe366ad"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--03989c7e-5553-5f50-899b-98310e24bb32",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "clm:b5c799de-b665-49d7-a785-262fbaae92f8",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "and ST HD",
          "url": "https://www.andst-hd.co.jp/news/notice/entry-17234/",
          "external_id": "cit:f718af2e-2b8a-42bc-9410-b042d72de26f",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:120ec3100de8f08f56e05d0565d359de30ed53e4e2f4a048b273da569fe366ad"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The company consulted police and reported to Japan’s Personal Information Protection Commission on October 23, began notifications and continued investigating financial impact."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--068cf9f0-a1f6-5ef6-89d7-bbd00de5cdfb",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "clm:fe78ca49-a066-433e-a443-a5f4bb577513",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "and ST HD",
          "url": "https://www.andst-hd.co.jp/news/notice/entry-17234/",
          "external_id": "cit:e5110a28-bfa1-4e34-9d21-d0f576a711b8",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:120ec3100de8f08f56e05d0565d359de30ed53e4e2f4a048b273da569fe366ad"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Potentially leaked information covered about 2.5 million customer records and about 10,000 business-partner records; employee scope was still being checked."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--08e38c33-15d4-5206-82f7-f3fb3d568c8a",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "clm:177743ad-b756-46a8-bbd7-4f320674a0a0",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "and ST HD",
          "url": "https://www.andst-hd.co.jp/news/notice/entry-17234/",
          "external_id": "cit:7424943f-b618-4a4f-9c69-a08fb4fec5bb",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:120ec3100de8f08f56e05d0565d359de30ed53e4e2f4a048b273da569fe366ad"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "and ST HD reported login attempts, intrusions and data extraction across multiple business servers beginning around 07:30 on October 22; it detected unauthorized operations around 10:00, isolated servers and blocked the access route by 17:00, all Japan time."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--2195f520-1363-5f15-87d8-820dcbc4978c",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "clm:f201e7a1-9bea-45fe-98d9-8d51aaf71c5c",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "and ST HD",
          "url": "https://www.andst-hd.co.jp/news/notice/entry-17234/",
          "external_id": "cit:68c0cab6-0cf1-44ae-a473-81ef72addceb",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:120ec3100de8f08f56e05d0565d359de30ed53e4e2f4a048b273da569fe366ad"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-22"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--244060b5-3a13-57fb-8dd8-b964fe4c838e",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "clm:26d6c74d-6250-4599-b5f0-04487c6d3fab",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "and ST HD",
          "url": "https://www.andst-hd.co.jp/news/notice/entry-17234/",
          "external_id": "cit:8337aae8-fc68-4ad1-ae7c-5102e23fb140",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:120ec3100de8f08f56e05d0565d359de30ed53e4e2f4a048b273da569fe366ad"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Customer fields included names, birth dates, gender, addresses, phone numbers, email addresses and membership IDs; partner data included company/contact names, order or return addresses, phone numbers and email addresses."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--4b68392c-7db2-5ff1-8e01-380caaf125b8",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "clm:59b0003c-ddf6-4f39-9857-e78158c31f4c",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "and ST HD",
          "url": "https://www.andst-hd.co.jp/news/notice/entry-17234/",
          "external_id": "cit:d49e6859-74e2-4935-88c5-5c393f5c8d49",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:120ec3100de8f08f56e05d0565d359de30ed53e4e2f4a048b273da569fe366ad"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Stores and the and ST web store remained usable, but membership points could not be used. The company said the web store itself was not affected by the intrusion."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--67871ce8-c0f3-5194-8704-4d763ad367b7",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "clm:25184c0f-5753-4c51-8e2a-ad2122e63e1d",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "and ST HD",
          "url": "https://www.andst-hd.co.jp/news/notice/entry-17234/",
          "external_id": "cit:2e8b180f-c6e8-4e32-93b3-0d909e72fe55",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:120ec3100de8f08f56e05d0565d359de30ed53e4e2f4a048b273da569fe366ad"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-23"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--78372d0e-0f5c-56ff-818f-d82c5fbcf492",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "clm:559c5453-44b2-48a2-b2e6-05524e504665",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "and ST HD",
          "url": "https://www.andst-hd.co.jp/news/notice/entry-17234/",
          "external_id": "cit:992b7363-0ed7-4895-9f2e-4122642b6389",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:120ec3100de8f08f56e05d0565d359de30ed53e4e2f4a048b273da569fe366ad"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The company said payment information such as credit-card details and customer-set passwords were not included in the potentially exposed data."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--94ff9164-fb94-563d-8026-c2a4bf058734",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "clm:79e29d07-2e75-46cf-882d-81033918d1e3",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "and ST HD",
          "url": "https://www.andst-hd.co.jp/news/notice/entry-17234/",
          "external_id": "cit:97d00172-70a0-4354-8f4f-86d3edc86c31",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:120ec3100de8f08f56e05d0565d359de30ed53e4e2f4a048b273da569fe366ad"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-22"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--9b576497-1b70-505e-850d-1083cc740fe3",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "clm:8165ad87-19dc-40e2-8a71-9d941d1d3fd2",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "and ST HD",
          "url": "https://www.andst-hd.co.jp/news/notice/entry-17234/",
          "external_id": "cit:da89be6c-484a-429e-970d-825aac5e3879",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:120ec3100de8f08f56e05d0565d359de30ed53e4e2f4a048b273da569fe366ad"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "integer",
        "value": 2500000,
        "unit": "record",
        "approximate": true
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--9cc83979-46d5-5c7e-818a-a8c1f263c758",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "clm:ffa111ed-6a67-477b-823d-e677151d8f3e",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "and ST HD",
          "url": "https://www.andst-hd.co.jp/news/notice/entry-17234/",
          "external_id": "cit:fe035931-4b0d-4d28-ba05-f42483b09599",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:120ec3100de8f08f56e05d0565d359de30ed53e4e2f4a048b273da569fe366ad"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-22"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--d96cc69d-c6e5-5112-808a-b35db9070b94",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "clm:4fe66fa6-1441-40a2-860a-c61e782abc38",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "and ST HD",
          "url": "https://www.andst-hd.co.jp/news/notice/entry-17234/",
          "external_id": "cit:41c418f5-30ee-4fde-b5b0-33f10ac397ee",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:120ec3100de8f08f56e05d0565d359de30ed53e4e2f4a048b273da569fe366ad"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-23"
      }
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--23d57da1-2ac0-57ac-8c37-ca38dc87c772",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "evt:171780c4-4ada-4a64-95f2-2ce212ffdef5",
      "name": "Potential exposure disclosed and authorities notified"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--48b9d8fc-4363-5d63-82ae-c1c2dd41ffc7",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "evt:f5a9ef65-47b2-451f-b78d-bcd2afe07d1f",
      "name": "Server intrusion detected and access blocked"
    }
  ]
}