{
  "type": "bundle",
  "id": "bundle--deb2a6b2-835e-53c1-8c6c-8421b0e69ec9",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--050ff204-d95a-579a-81ad-f30f0b405715",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "org:c4b8d245-0b81-4653-8c34-ecb5637a3349",
      "name": "Andromeda",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--00b8703a-36d2-5824-8271-d9f2638d9862",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "brh:3c89dc7b-caf7-4d91-b52c-4e9f843fce32",
      "name": "Andromeda customer-credential incident"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--1764d0f2-7b2f-57ba-8cbc-f51b3342168a",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "inc:71fb840a-b8a3-45f0-99bf-323471fd5854",
      "name": "Andromeda customer-credential incident"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--02ace70b-695b-54c6-8754-c6335ba5e260",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:667451fa-b52e-4ef3-a289-23cb7820e7a5",
      "relationship_type": "resulted-in",
      "source_ref": "incident--1764d0f2-7b2f-57ba-8cbc-f51b3342168a",
      "target_ref": "x-ally-event--43dab2f5-10b2-58c0-8afb-437725be5c27",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Andromeda",
          "url": "https://andromeda.ai/security-updates/october-2026-security-incident",
          "external_id": "cit:3accd449-7dd8-4736-bac0-2b7f4cf7d0ee",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e6443bbd7fe55a475e095a3391b06cfff3ef42a8a9c0c4f678cd83e5462115d5"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--27cee698-0fb8-5c25-8376-ef6aec66a518",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:bbc37957-ba7d-45d5-916f-1e7e31972bc3",
      "relationship_type": "resulted-in",
      "source_ref": "incident--1764d0f2-7b2f-57ba-8cbc-f51b3342168a",
      "target_ref": "x-ally-event--4bb3d236-6fd7-5524-8bf0-1fe0ec9bb83d",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Andromeda",
          "url": "https://andromeda.ai/security-updates/october-2026-security-incident",
          "external_id": "cit:26aa4278-f4af-4b8a-aa43-9f75c9fef979",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e6443bbd7fe55a475e095a3391b06cfff3ef42a8a9c0c4f678cd83e5462115d5"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--7d609977-214a-5f76-841d-f75888169fc6",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:b37442ef-d21d-40fa-9854-ee84069b27d3",
      "relationship_type": "affected-organization",
      "source_ref": "incident--1764d0f2-7b2f-57ba-8cbc-f51b3342168a",
      "target_ref": "identity--050ff204-d95a-579a-81ad-f30f0b405715",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Andromeda",
          "url": "https://andromeda.ai/security-updates/october-2026-security-incident",
          "external_id": "cit:b8abb202-1045-4dd6-be00-616b2d7ce33e",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e6443bbd7fe55a475e095a3391b06cfff3ef42a8a9c0c4f678cd83e5462115d5"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--3a8436e6-897d-56fd-80c5-e8fa145cdcdd",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:6a05097d-f034-4557-b5ae-1377d8e79f5d",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Andromeda",
          "url": "https://andromeda.ai/security-updates/october-2026-security-incident",
          "external_id": "cit:528309c1-d2eb-4fa7-bf7c-901a89533db3",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e6443bbd7fe55a475e095a3391b06cfff3ef42a8a9c0c4f678cd83e5462115d5"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-13"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--4bbfeeb1-481c-5865-8dca-631d2cb29229",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:d47a67aa-d98d-421d-b9a5-7241a75eb5fa",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Andromeda",
          "url": "https://andromeda.ai/security-updates/october-2026-security-incident",
          "external_id": "cit:5a704637-7c6b-4323-beb1-9421cbeaa22b",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e6443bbd7fe55a475e095a3391b06cfff3ef42a8a9c0c4f678cd83e5462115d5"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Andromeda said a limited number of customer accounts were affected and certain company and customer credentials were exposed. It found no evidence of access to customer models, datasets or training data within its control."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--819bf815-ba01-5521-8c31-a65f772d3bca",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:6744844c-93fe-4bd6-9c2b-c55e686256a9",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Andromeda",
          "url": "https://andromeda.ai/security-updates/october-2026-security-incident",
          "external_id": "cit:19d33b0f-44fa-4110-9be8-7348ea2ad49b",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e6443bbd7fe55a475e095a3391b06cfff3ef42a8a9c0c4f678cd83e5462115d5"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-20"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--8853e54d-59d2-573b-8302-8e0d0771c3b8",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:8c0cede9-e16c-4e14-9bfb-c2a64716716a",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Andromeda",
          "url": "https://andromeda.ai/security-updates/october-2026-security-incident",
          "external_id": "cit:5b194cf7-29a2-40a7-b1e1-95c2dd3b267e",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e6443bbd7fe55a475e095a3391b06cfff3ef42a8a9c0c4f678cd83e5462115d5"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Andromeda believed activity began around October 9 but had not established the root cause. Similar incidents at other providers do not establish a shared attacker."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--88e297ca-19ae-51fe-83f8-06a24362b8ab",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:3fd071a5-19b5-4da0-9e7c-ef47d92ec0da",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Andromeda",
          "url": "https://andromeda.ai/security-updates/october-2026-security-incident",
          "external_id": "cit:29665062-336e-454e-b5ed-5c70aa2230d3",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e6443bbd7fe55a475e095a3391b06cfff3ef42a8a9c0c4f678cd83e5462115d5"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-13"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--adbad726-b564-564a-8c0d-48d90aba9b60",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:fea2cf8f-9696-4974-b428-598b8cfbc116",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Andromeda",
          "url": "https://andromeda.ai/security-updates/october-2026-security-incident",
          "external_id": "cit:f23bec09-32ab-4de1-a352-5408cd5cd760",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e6443bbd7fe55a475e095a3391b06cfff3ef42a8a9c0c4f678cd83e5462115d5"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Andromeda rotated affected keys, hardened infrastructure, contacted affected customers and engaged outside forensic teams. It reported no further unauthorized activity after disabling the accounts."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--f9ed9179-962e-5cd8-8c0d-67e733bc49b0",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:49c27b1c-f36e-47cf-ad5e-5efb5c69b48f",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Andromeda",
          "url": "https://andromeda.ai/security-updates/october-2026-security-incident",
          "external_id": "cit:8efb40d9-ffaf-4b4e-9af2-b7ccac85af0f",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e6443bbd7fe55a475e095a3391b06cfff3ef42a8a9c0c4f678cd83e5462115d5"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-20"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--fdfb3569-577a-5c85-82c5-1c7d52ad2e75",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:1bf0ea48-815b-4dc6-9d39-18932725e41e",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Andromeda",
          "url": "https://andromeda.ai/security-updates/october-2026-security-incident",
          "external_id": "cit:bf01bd56-f6e1-471a-b3c8-c0d351c40a0b",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e6443bbd7fe55a475e095a3391b06cfff3ef42a8a9c0c4f678cd83e5462115d5"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Andromeda detected unauthorized credential access on October 13, 2026, and disabled the compromised accounts that day."
      }
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--43dab2f5-10b2-58c0-8afb-437725be5c27",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "evt:9e158970-af4b-4bba-97db-63efe5220c60",
      "name": "Credential access detected and accounts disabled"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--4bb3d236-6fd7-5524-8bf0-1fe0ec9bb83d",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "evt:fe3a33e1-1f08-4611-abc6-f568642c4f64",
      "name": "Security update published"
    }
  ]
}