{
  "type": "bundle",
  "id": "bundle--9c92bff0-881c-52b7-8d61-a67ad22dadeb",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--41f1e435-491a-55e1-87c8-ce5b1e303102",
      "created": "2026-10-14T14:18:30.218820+00:00",
      "modified": "2026-10-14T14:18:30.218820+00:00",
      "x_ally_original_id": "org:fb8f88bf-3cf4-46bb-a5dd-332feea05c40",
      "name": "Anywayanyday",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--13641928-5b22-5910-8058-0abe1a056af4",
      "created": "2026-10-14T14:18:30.218820+00:00",
      "modified": "2026-10-14T14:18:30.218820+00:00",
      "x_ally_original_id": "brh:cb48e485-0d3b-4092-808b-bf5983639eab",
      "name": "Anywayanyday cyberattack"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--e9820355-677d-55ca-8ed2-e653db4e79f2",
      "created": "2026-10-14T14:18:30.218820+00:00",
      "modified": "2026-10-14T14:18:30.218820+00:00",
      "x_ally_original_id": "inc:677ef3e2-8830-444e-b852-6ff4a40ae99f",
      "name": "Anywayanyday cyberattack"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--daba9d47-8cec-5dbd-8d07-12bf449b0e2b",
      "created": "2026-10-14T14:18:30.218820+00:00",
      "modified": "2026-10-14T14:18:30.218820+00:00",
      "x_ally_original_id": "clm:5970ddb8-1d76-4f81-a102-6cdafec400e4",
      "relationship_type": "resulted-in",
      "source_ref": "incident--e9820355-677d-55ca-8ed2-e653db4e79f2",
      "target_ref": "x-ally-event--0a7b8177-2eb2-5cd1-8374-44efe29decfb",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "The Record",
          "url": "https://therecord.media/russia-anywayanyday-travel-website-cyberattack",
          "external_id": "cit:67c2a86b-aba0-47aa-b8a8-0b5802c7264c",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:ef7525abcc4227c75b3c29b8930614a17537af7b99cb5b58aa55de9828691116"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--f6d1ab7f-4989-5474-8d22-09950950e85b",
      "created": "2026-10-14T14:18:30.218820+00:00",
      "modified": "2026-10-14T14:18:30.218820+00:00",
      "x_ally_original_id": "clm:7cef534c-a8ca-4385-ae2b-84dc953152d0",
      "relationship_type": "affected-organization",
      "source_ref": "incident--e9820355-677d-55ca-8ed2-e653db4e79f2",
      "target_ref": "identity--41f1e435-491a-55e1-87c8-ce5b1e303102",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Anywayanyday",
          "url": "https://anywayanyday.agency/",
          "external_id": "cit:b8b151f7-daf2-4575-864d-4f1a527d6a27",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:334de877518d485275a82c1729ed2c8c5c4294dc16f6280638acb851ef68129a"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--128ff955-6da1-5003-8e44-953def9f05d1",
      "created": "2026-10-14T14:18:30.218820+00:00",
      "modified": "2026-10-14T14:18:30.218820+00:00",
      "x_ally_original_id": "clm:8f253e67-1854-4b27-9b7c-7d757c9ba2c8",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Anywayanyday",
          "url": "https://anywayanyday.agency/",
          "external_id": "cit:a50ae707-1921-4414-9322-cb64d5042fc4",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:334de877518d485275a82c1729ed2c8c5c4294dc16f6280638acb851ef68129a"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Anywayanyday attributed service restrictions to recovery from a cyberattack on its IT infrastructure."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--55ca868d-772e-51e5-88ff-14584c5302fb",
      "created": "2026-10-14T14:18:30.218820+00:00",
      "modified": "2026-10-14T14:18:30.218820+00:00",
      "x_ally_original_id": "clm:7d8b5091-783d-41e2-968b-0e3eec930147",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Anywayanyday",
          "url": "https://anywayanyday.agency/",
          "external_id": "cit:517f2dde-cd93-48b9-aa30-eb6078a6786b",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:334de877518d485275a82c1729ed2c8c5c4294dc16f6280638acb851ef68129a"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The company said it strengthened protection, engaged Russian information-security firms and notified regulators while restoring service availability."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--6c87822c-89df-5fd3-8467-791e385e2161",
      "created": "2026-10-14T14:18:30.218820+00:00",
      "modified": "2026-10-14T14:18:30.218820+00:00",
      "x_ally_original_id": "clm:3e31f12a-08f4-40c8-947b-1b38e631a905",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "The Record",
          "url": "https://therecord.media/russia-anywayanyday-travel-website-cyberattack",
          "external_id": "cit:273c6ca6-703e-455f-9eb8-20781276bc9a",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:ef7525abcc4227c75b3c29b8930614a17537af7b99cb5b58aa55de9828691116"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The Record reported the company-confirmed disruption; this is a reporting date, not an established attack date."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--a342da86-8b95-562a-88ea-1008612ba333",
      "created": "2026-10-14T14:18:30.218820+00:00",
      "modified": "2026-10-14T14:18:30.218820+00:00",
      "x_ally_original_id": "clm:466e5d0d-e182-4e15-bc71-a1cca54142bc",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Anywayanyday",
          "url": "https://anywayanyday.agency/",
          "external_id": "cit:b3b68b11-55ba-4e44-a345-abf2cd9ab82a",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:334de877518d485275a82c1729ed2c8c5c4294dc16f6280638acb851ef68129a"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The company said it had not identified signs of a personal-data leak at the time of its statement; that does not establish that no exposure occurred."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--d15f0981-850e-5418-86b9-53172da31d36",
      "created": "2026-10-14T14:18:30.218820+00:00",
      "modified": "2026-10-14T14:18:30.218820+00:00",
      "x_ally_original_id": "clm:f277b5cc-6b6c-4612-af71-4bf3061e4849",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "The Record",
          "url": "https://therecord.media/russia-anywayanyday-travel-website-cyberattack",
          "external_id": "cit:09f1d2e1-4ca6-4c99-82a7-1e8108864006",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:ef7525abcc4227c75b3c29b8930614a17537af7b99cb5b58aa55de9828691116"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The Record reported on October 14 that new flight, train and hotel bookings were suspended, while previously confirmed reservations remained valid, citing the company."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--ff668ece-e4d7-5108-878f-bec388b0f78a",
      "created": "2026-10-14T14:18:30.218820+00:00",
      "modified": "2026-10-14T14:18:30.218820+00:00",
      "x_ally_original_id": "clm:222ac8fd-3af6-4252-b00d-0456db9013ed",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "The Record",
          "url": "https://therecord.media/russia-anywayanyday-travel-website-cyberattack",
          "external_id": "cit:3685e3c1-0d5b-4b7c-9c34-e134e55cc0df",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:ef7525abcc4227c75b3c29b8930614a17537af7b99cb5b58aa55de9828691116"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-14"
      }
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--0a7b8177-2eb2-5cd1-8374-44efe29decfb",
      "created": "2026-10-14T14:18:30.218820+00:00",
      "modified": "2026-10-14T14:18:30.218820+00:00",
      "x_ally_original_id": "evt:ac445d72-665a-4c1d-a756-5042ac2f1b56",
      "name": "Booking disruption reported"
    }
  ]
}
