{
  "type": "bundle",
  "id": "bundle--62f78b4a-7247-5e34-8db3-ee40352f7eeb",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--ff834ecc-702a-5417-809a-34a06194c6ae",
      "created": "2026-10-30T14:19:15.350445+00:00",
      "modified": "2026-10-30T14:19:15.350445+00:00",
      "x_ally_original_id": "org:7f4df95c-2f7b-481c-bf1d-8012ba6ce78f",
      "name": "Organization for Transformative Works",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--3d5c939f-b639-5a74-8c26-d39577fec19e",
      "created": "2026-10-30T14:19:15.350445+00:00",
      "modified": "2026-10-30T14:19:15.350445+00:00",
      "x_ally_original_id": "inc:00ef7921-2a46-43b7-ae88-246ba6411b29",
      "name": "AO3 security incident"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--b3692c94-6d27-5e89-88c5-5eacc29c9f3d",
      "created": "2026-10-30T14:19:15.350445+00:00",
      "modified": "2026-10-30T14:19:15.350445+00:00",
      "x_ally_original_id": "brh:8f8ce12b-7cab-411d-90f0-408e29b656e2",
      "name": "AO3 security incident"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--690697a0-f776-533f-835c-92bb75f0fe11",
      "created": "2026-10-30T14:19:15.350445+00:00",
      "modified": "2026-10-30T14:19:15.350445+00:00",
      "x_ally_original_id": "clm:18235b88-506d-4258-b9ea-be2b55c56dcc",
      "relationship_type": "affected-organization",
      "source_ref": "incident--3d5c939f-b639-5a74-8c26-d39577fec19e",
      "target_ref": "identity--ff834ecc-702a-5417-809a-34a06194c6ae",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Organization for Transformative Works",
          "url": "https://www.transformativeworks.org/update-on-ao3-downtime-october-30-2026/",
          "external_id": "cit:c7196d76-a557-42b9-ba1d-1fb408d67003",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:32979b392d7ba3f90016b8c7c9850aeff95afabd236039ec6b277bb76b625bd0"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--d4b3b4b1-ee8c-5bc4-8490-ab2f6937a93a",
      "created": "2026-10-30T14:19:15.350445+00:00",
      "modified": "2026-10-30T14:19:15.350445+00:00",
      "x_ally_original_id": "clm:c39230b5-1898-4dbe-b151-9f56cd1a4b82",
      "relationship_type": "resulted-in",
      "source_ref": "incident--3d5c939f-b639-5a74-8c26-d39577fec19e",
      "target_ref": "x-ally-event--8cd17cf2-fdbd-5833-86b6-d584b2e0114d",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Organization for Transformative Works",
          "url": "https://www.transformativeworks.org/update-on-ao3-downtime-october-30-2026/",
          "external_id": "cit:dc30260f-3de5-4250-ae95-8e0aa3959631",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:32979b392d7ba3f90016b8c7c9850aeff95afabd236039ec6b277bb76b625bd0"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--0f718c0a-b566-55c3-8aab-084b210a4020",
      "created": "2026-10-30T14:19:15.350445+00:00",
      "modified": "2026-10-30T14:19:15.350445+00:00",
      "x_ally_original_id": "clm:945b5c70-064e-4010-aaa3-fc7a88a5421c",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Organization for Transformative Works",
          "url": "https://www.transformativeworks.org/update-on-ao3-downtime-october-30-2026/",
          "external_id": "cit:ae6bb55c-4a2d-4a7f-9680-91a62f9a92da",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:32979b392d7ba3f90016b8c7c9850aeff95afabd236039ec6b277bb76b625bd0"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "OTW recommended changing passwords reused on other services as a precaution. No attacker, access method, affected-user count or confirmed database theft was established."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--64445048-0b67-5197-892e-2323997d3419",
      "created": "2026-10-30T14:19:15.350445+00:00",
      "modified": "2026-10-30T14:19:15.350445+00:00",
      "x_ally_original_id": "clm:04731417-c680-4f58-b975-5e76ba297e06",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Organization for Transformative Works",
          "url": "https://www.transformativeworks.org/update-on-ao3-downtime-october-30-2026/",
          "external_id": "cit:257cc8b9-1650-4a53-ac50-9b37b87ed905",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:32979b392d7ba3f90016b8c7c9850aeff95afabd236039ec6b277bb76b625bd0"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The potentially exposed account database contains usernames, email addresses, IP addresses and hashed passwords. OTW said it does not collect real names and separate donor information was not exposed."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--64665294-d809-5f1c-8b6f-9532f849e933",
      "created": "2026-10-30T14:19:15.350445+00:00",
      "modified": "2026-10-30T14:19:15.350445+00:00",
      "x_ally_original_id": "clm:0ee6c8af-0515-4a9d-a543-1121b0da0229",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Organization for Transformative Works",
          "url": "https://www.transformativeworks.org/update-on-ao3-downtime-october-30-2026/",
          "external_id": "cit:f615f66f-4fd5-40b1-9f9b-d9f2a38c037b",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:32979b392d7ba3f90016b8c7c9850aeff95afabd236039ec6b277bb76b625bd0"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-30"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--7510aff4-76ac-58ed-8bd6-940549b90b02",
      "created": "2026-10-30T14:19:15.350445+00:00",
      "modified": "2026-10-30T14:19:15.350445+00:00",
      "x_ally_original_id": "clm:fa0dd629-e90f-4665-8329-08d0ab17ed7e",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Organization for Transformative Works",
          "url": "https://www.transformativeworks.org/update-on-ao3-downtime-october-30-2026/",
          "external_id": "cit:745f2a11-736d-46af-9bb9-650144bad639",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:32979b392d7ba3f90016b8c7c9850aeff95afabd236039ec6b277bb76b625bd0"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-30"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--8961d9f8-7b1d-51ce-84a4-8768227ca562",
      "created": "2026-10-30T14:19:15.350445+00:00",
      "modified": "2026-10-30T14:19:15.350445+00:00",
      "x_ally_original_id": "clm:7eee54bd-1b16-457c-8288-0571e3d0c511",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Organization for Transformative Works",
          "url": "https://www.transformativeworks.org/update-on-ao3-downtime-october-30-2026/",
          "external_id": "cit:ad30cd19-d94b-4e9a-aab6-14dd20531bbc",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:32979b392d7ba3f90016b8c7c9850aeff95afabd236039ec6b277bb76b625bd0"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-30"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--db1e2bea-3247-5715-86bc-6f2836cc7f4b",
      "created": "2026-10-30T14:19:15.350445+00:00",
      "modified": "2026-10-30T14:19:15.350445+00:00",
      "x_ally_original_id": "clm:5aebf461-95ec-4e57-99c0-b1b0df2a8697",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Organization for Transformative Works",
          "url": "https://www.transformativeworks.org/update-on-ao3-downtime-october-30-2026/",
          "external_id": "cit:6c8f6634-f7e9-4fa2-99e4-267630fbdb8a",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:32979b392d7ba3f90016b8c7c9850aeff95afabd236039ec6b277bb76b625bd0"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "OTW said works, bookmarks and kudos had not been deleted. It did not believe the user database was stolen but could not rule this out."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--f60276ac-cb3a-5d82-8454-dc4c5c0ffaff",
      "created": "2026-10-30T14:19:15.350445+00:00",
      "modified": "2026-10-30T14:19:15.350445+00:00",
      "x_ally_original_id": "clm:debbc724-3f13-44e6-be33-b2886985af59",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Organization for Transformative Works",
          "url": "https://www.transformativeworks.org/update-on-ao3-downtime-october-30-2026/",
          "external_id": "cit:9b08abeb-67e2-4d5d-8967-398e52f81ecf",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:32979b392d7ba3f90016b8c7c9850aeff95afabd236039ec6b277bb76b625bd0"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "OTW estimated at least two weeks and potentially four weeks of downtime, with possible degraded or read-only availability and further shutdowns during recovery. This is a forecast, not a completed outage duration."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--f80b2b64-fd1f-5d7a-8e9f-9e1793f436e5",
      "created": "2026-10-30T14:19:15.350445+00:00",
      "modified": "2026-10-30T14:19:15.350445+00:00",
      "x_ally_original_id": "clm:a52dff9e-1122-4e1a-be29-f96626a40b0c",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Organization for Transformative Works",
          "url": "https://www.transformativeworks.org/update-on-ao3-downtime-october-30-2026/",
          "external_id": "cit:ed485f27-0cda-4619-af56-eda47b3e43e4",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:32979b392d7ba3f90016b8c7c9850aeff95afabd236039ec6b277bb76b625bd0"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "OTW detected evidence of a security incident on AO3 and kept the service offline while investigating and determining the scope."
      }
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--8cd17cf2-fdbd-5833-86b6-d584b2e0114d",
      "created": "2026-10-30T14:19:15.350445+00:00",
      "modified": "2026-10-30T14:19:15.350445+00:00",
      "x_ally_original_id": "evt:7f7a3f34-9a1b-4223-8069-f3ece6901eef",
      "name": "Security incident disclosed; investigation continues"
    }
  ]
}