{
  "type": "bundle",
  "id": "bundle--b578944d-5713-5dd3-8ab2-0c32d43298b5",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--9fc8ed60-f342-5820-8e9b-bd4bc41d2c50",
      "created": "2026-08-09T06:50:00Z",
      "modified": "2026-08-09T06:50:00Z",
      "x_ally_original_id": "org:947735c9-a5a4-4602-864a-47105274379b",
      "name": "APOIA.se",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--0edd09f4-db63-5bd1-89e8-eaea7dd28add",
      "created": "2026-08-09T06:50:00Z",
      "modified": "2026-08-09T06:50:00Z",
      "x_ally_original_id": "inc:88ec64fc-8a19-4144-b4a7-b620aa7a9e56",
      "name": "December 2025 APOIA.se registration-data incident"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--7fc2902d-1067-59d1-82cd-03066031fa2a",
      "created": "2026-08-09T06:50:00Z",
      "modified": "2026-08-09T06:50:00Z",
      "x_ally_original_id": "brh:e139aa2c-f3b1-4d7e-9839-2667d4cfba92",
      "name": "APOIA.se user-registration data breach"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--9ae165ff-9ded-56c9-82f6-3ec595ed3559",
      "created": "2026-08-09T06:50:00Z",
      "modified": "2026-08-09T06:50:00Z",
      "x_ally_original_id": "clm:cf7b1291-0759-4dc8-a5a8-fb725fe8c17b",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--dcd8f90c-18fe-50d5-85f9-e55dd2c9692b",
      "target_ref": "x-ally-data-category--c79f34f3-405d-57d2-8409-98eff3898231",
      "confidence": 90,
      "external_references": [
        {
          "source_name": "Canaltech",
          "url": "https://canaltech.com.br/seguranca/apoiase-confirma-vazamento-de-dados-de-usuarios-veja-como-se-proteger/",
          "external_id": "cit:22f50b89-47ba-4b74-9400-38cb2660fda6",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:1d3421b7d52aecf309199a4d81ee09bf77425f6bda2c7307d6cec9e6f556c89b"
        },
        {
          "source_name": "Have I Been Pwned",
          "url": "https://haveibeenpwned.com/api/v3/breach/APOIAse",
          "external_id": "cit:7a395241-1cb4-4b19-b179-831fbff2dfd8",
          "x_ally_stance": "qualifies",
          "x_ally_snapshot_id": "snp:sha256:73fc1547a3db557251d2433078e7a07e3afe683c0c0372dfb0af3bb65a913d24"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--bee928ac-d0c1-519f-832a-3dff94c7cb03",
      "created": "2026-08-09T06:50:00Z",
      "modified": "2026-08-09T06:50:00Z",
      "x_ally_original_id": "clm:302c04cf-16f2-422b-8d88-7787f16cc2c9",
      "relationship_type": "affected-organization",
      "source_ref": "incident--0edd09f4-db63-5bd1-89e8-eaea7dd28add",
      "target_ref": "identity--9fc8ed60-f342-5820-8e9b-bd4bc41d2c50",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Canaltech",
          "url": "https://canaltech.com.br/seguranca/apoiase-confirma-vazamento-de-dados-de-usuarios-veja-como-se-proteger/",
          "external_id": "cit:1a4e5757-2f6d-49aa-bb87-4e5c858858ba",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:1d3421b7d52aecf309199a4d81ee09bf77425f6bda2c7307d6cec9e6f556c89b"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--e85371cd-bddd-5e63-8523-17f1f17d5c54",
      "created": "2026-08-09T06:50:00Z",
      "modified": "2026-08-09T06:50:00Z",
      "x_ally_original_id": "clm:85de27ce-13c1-4b02-ac5c-92a2c82967ff",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--dcd8f90c-18fe-50d5-85f9-e55dd2c9692b",
      "target_ref": "x-ally-data-category--a2b7dd9d-0c02-5710-88ed-ea507d0ffa07",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Canaltech",
          "url": "https://canaltech.com.br/seguranca/apoiase-confirma-vazamento-de-dados-de-usuarios-veja-como-se-proteger/",
          "external_id": "cit:0751b557-a903-41a5-9b9f-046565e86f2e",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:1d3421b7d52aecf309199a4d81ee09bf77425f6bda2c7307d6cec9e6f556c89b"
        },
        {
          "source_name": "Have I Been Pwned",
          "url": "https://haveibeenpwned.com/api/v3/breach/APOIAse",
          "external_id": "cit:97db0cc7-3647-4a6b-8de0-a9c1906c6099",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:73fc1547a3db557251d2433078e7a07e3afe683c0c0372dfb0af3bb65a913d24"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--e8febf12-761b-55ab-8864-348e381b5f46",
      "created": "2026-08-09T06:50:00Z",
      "modified": "2026-08-09T06:50:00Z",
      "x_ally_original_id": "clm:c3375373-cbe1-4c7a-b405-e576836fe6fc",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--dcd8f90c-18fe-50d5-85f9-e55dd2c9692b",
      "target_ref": "x-ally-data-category--8d61e479-4403-5ccf-8301-fc8eecd71836",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Canaltech",
          "url": "https://canaltech.com.br/seguranca/apoiase-confirma-vazamento-de-dados-de-usuarios-veja-como-se-proteger/",
          "external_id": "cit:f44cd466-98c9-4de2-9fb0-1138767727bf",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:1d3421b7d52aecf309199a4d81ee09bf77425f6bda2c7307d6cec9e6f556c89b"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--f84a3633-8b43-5f0f-8ddc-a1ba7a74817b",
      "created": "2026-08-09T06:50:00Z",
      "modified": "2026-08-09T06:50:00Z",
      "x_ally_original_id": "clm:4b9e535e-d5e0-4152-adf1-79d4768d6c50",
      "relationship_type": "resulted-in",
      "source_ref": "incident--0edd09f4-db63-5bd1-89e8-eaea7dd28add",
      "target_ref": "x-ally-data-exposure--dcd8f90c-18fe-50d5-85f9-e55dd2c9692b",
      "confidence": 80,
      "external_references": [
        {
          "source_name": "Canaltech",
          "url": "https://canaltech.com.br/seguranca/apoiase-confirma-vazamento-de-dados-de-usuarios-veja-como-se-proteger/",
          "external_id": "cit:55a72315-c74b-49ae-bcb8-c4c8103d72b7",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:1d3421b7d52aecf309199a4d81ee09bf77425f6bda2c7307d6cec9e6f556c89b"
        },
        {
          "source_name": "Canaltech",
          "url": "https://canaltech.com.br/seguranca/apoiase-confirma-vazamento-de-dados-de-usuarios-veja-como-se-proteger/",
          "external_id": "cit:6aa5fc41-74e6-4890-997c-9196d9072019",
          "x_ally_stance": "qualifies",
          "x_ally_snapshot_id": "snp:sha256:1d3421b7d52aecf309199a4d81ee09bf77425f6bda2c7307d6cec9e6f556c89b"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--0d04c597-f1ca-5995-8c91-9b9ec96fe0a0",
      "created": "2026-08-09T06:50:00Z",
      "modified": "2026-08-09T06:50:00Z",
      "x_ally_original_id": "clm:ab2203e0-8c61-455b-84e6-8f5379bfcb3a",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Canaltech",
          "url": "https://canaltech.com.br/seguranca/apoiase-confirma-vazamento-de-dados-de-usuarios-veja-como-se-proteger/",
          "external_id": "cit:5253a2a2-c645-4b11-8858-82ee3c8cfb6a",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:1d3421b7d52aecf309199a4d81ee09bf77425f6bda2c7307d6cec9e6f556c89b"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "APOIA.se said the list of projects a user supported was not accessed."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--2f61252c-50c7-5f9e-8b0d-6ade11e8ad39",
      "created": "2026-08-09T06:50:00Z",
      "modified": "2026-08-09T06:50:00Z",
      "x_ally_original_id": "clm:4479b4b3-7ad8-4d2f-85a5-e4dce4b38241",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Canaltech",
          "url": "https://canaltech.com.br/seguranca/apoiase-confirma-vazamento-de-dados-de-usuarios-veja-como-se-proteger/",
          "external_id": "cit:10131d20-67ed-4120-9be3-2397b98aa66b",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:1d3421b7d52aecf309199a4d81ee09bf77425f6bda2c7307d6cec9e6f556c89b"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "APOIA.se said it contained the vulnerability, reinforced security controls, and contacted the competent authorities."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--38ab33e0-203c-5d54-85be-be2e6e677131",
      "created": "2026-08-09T06:50:00Z",
      "modified": "2026-08-09T06:50:00Z",
      "x_ally_original_id": "clm:662e715b-1df9-4cef-9b1d-3c6b953d2121",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Canaltech",
          "url": "https://canaltech.com.br/seguranca/apoiase-confirma-vazamento-de-dados-de-usuarios-veja-como-se-proteger/",
          "external_id": "cit:ae55e94a-9984-4209-a32e-cea6dff1a560",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:1d3421b7d52aecf309199a4d81ee09bf77425f6bda2c7307d6cec9e6f556c89b"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "APOIA.se said its security teams corrected the vulnerability before the situation was confirmed, preventing further access."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--4abc9dba-2224-53e7-8358-dffc2b8e1888",
      "created": "2026-08-09T06:50:00Z",
      "modified": "2026-08-09T06:50:00Z",
      "x_ally_original_id": "clm:7a199977-bdd4-47a8-95ff-332f2005f41b",
      "confidence": 80,
      "external_references": [
        {
          "source_name": "Have I Been Pwned",
          "url": "https://haveibeenpwned.com/api/v3/breach/APOIAse",
          "external_id": "cit:98440d7d-2351-4c60-a7ff-634bbb0de73b",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:73fc1547a3db557251d2433078e7a07e3afe683c0c0372dfb0af3bb65a913d24"
        },
        {
          "source_name": "Canaltech",
          "url": "https://canaltech.com.br/seguranca/apoiase-confirma-vazamento-de-dados-de-usuarios-veja-como-se-proteger/",
          "external_id": "cit:8f217a58-2409-4d25-b920-ee2cf4562fb1",
          "x_ally_stance": "qualifies",
          "x_ally_snapshot_id": "snp:sha256:1d3421b7d52aecf309199a4d81ee09bf77425f6bda2c7307d6cec9e6f556c89b"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2025-12-16"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--64de7cd3-cbd3-59f6-8692-0216de51a935",
      "created": "2026-08-09T06:50:00Z",
      "modified": "2026-08-09T06:50:00Z",
      "x_ally_original_id": "clm:4af81179-6d8b-4954-bf4a-259d139139f3",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Canaltech",
          "url": "https://canaltech.com.br/seguranca/apoiase-confirma-vazamento-de-dados-de-usuarios-veja-como-se-proteger/",
          "external_id": "cit:163f8450-77fe-48a2-9f2d-dd1c9c3118d0",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:1d3421b7d52aecf309199a4d81ee09bf77425f6bda2c7307d6cec9e6f556c89b"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-01-06"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--9adb3918-ee1c-514d-868f-2ec10abc204a",
      "created": "2026-08-09T06:50:00Z",
      "modified": "2026-08-09T06:50:00Z",
      "x_ally_original_id": "clm:7b38f941-0e00-4152-8665-3f3b700b587b",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Canaltech",
          "url": "https://canaltech.com.br/seguranca/apoiase-confirma-vazamento-de-dados-de-usuarios-veja-como-se-proteger/",
          "external_id": "cit:17e5cf3c-ee79-4de2-8b15-d8cc22810956",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:1d3421b7d52aecf309199a4d81ee09bf77425f6bda2c7307d6cec9e6f556c89b"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "APOIA.se said passwords remained encrypted and inaccessible and were not exposed."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--a0afc073-194c-534c-82cf-d402970a0c59",
      "created": "2026-08-09T06:50:00Z",
      "modified": "2026-08-09T06:50:00Z",
      "x_ally_original_id": "clm:97b06d9d-3cf0-4a71-9fa6-4f291e0e4661",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Canaltech",
          "url": "https://canaltech.com.br/seguranca/apoiase-confirma-vazamento-de-dados-de-usuarios-veja-como-se-proteger/",
          "external_id": "cit:d30aa5cc-04db-4ce2-be2a-b37af8dbe2f2",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:1d3421b7d52aecf309199a4d81ee09bf77425f6bda2c7307d6cec9e6f556c89b"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "APOIA.se emailed affected users about the vulnerability, exposed registration fields, non-exposed sensitive information, remediation, and authority notification."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--bd0caabc-77af-5dfa-8c86-68642950bf0d",
      "created": "2026-08-09T06:50:00Z",
      "modified": "2026-08-09T06:50:00Z",
      "x_ally_original_id": "clm:f4cab1e2-a816-41e2-97e0-321bf77239ed",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Canaltech",
          "url": "https://canaltech.com.br/seguranca/apoiase-confirma-vazamento-de-dados-de-usuarios-veja-como-se-proteger/",
          "external_id": "cit:2373a0d5-2bcd-42dc-b340-3eb87f20efcf",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:1d3421b7d52aecf309199a4d81ee09bf77425f6bda2c7307d6cec9e6f556c89b"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "APOIA.se said payment information, including card numbers and security codes, was not exposed."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--cf05964f-9f49-5225-8ccc-d505067c3994",
      "created": "2026-08-09T06:50:00Z",
      "modified": "2026-08-09T06:50:00Z",
      "x_ally_original_id": "clm:0f96e93d-bbc2-43f8-93b7-b65d89338203",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Have I Been Pwned",
          "url": "https://haveibeenpwned.com/api/v3/breach/APOIAse",
          "external_id": "cit:4b9106ac-e5c5-4b16-89a8-63d14344d031",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:73fc1547a3db557251d2433078e7a07e3afe683c0c0372dfb0af3bb65a913d24"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "integer",
        "value": 450764,
        "unit": "record"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--d8979eb3-b870-5845-8f4b-dc7a6d772bcd",
      "created": "2026-08-09T06:50:00Z",
      "modified": "2026-08-09T06:50:00Z",
      "x_ally_original_id": "clm:5b2c4512-1ab1-4fbf-9cbc-671e25f2e525",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Canaltech",
          "url": "https://canaltech.com.br/seguranca/apoiase-confirma-vazamento-de-dados-de-usuarios-veja-como-se-proteger/",
          "external_id": "cit:a9ba4e41-a439-49a6-8f5c-5f046c743346",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:1d3421b7d52aecf309199a4d81ee09bf77425f6bda2c7307d6cec9e6f556c89b"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "A point vulnerability in APOIA.se's system allowed access to a database limited to registration data."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--e912d899-a795-5c23-87e4-ad6c2a5aa540",
      "created": "2026-08-09T06:50:00Z",
      "modified": "2026-08-09T06:50:00Z",
      "x_ally_original_id": "clm:33632645-5e46-497a-a6ee-12d549c6f8bc",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Canaltech",
          "url": "https://canaltech.com.br/seguranca/apoiase-confirma-vazamento-de-dados-de-usuarios-veja-como-se-proteger/",
          "external_id": "cit:cb888284-2213-421b-8d90-c794058e827e",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:1d3421b7d52aecf309199a4d81ee09bf77425f6bda2c7307d6cec9e6f556c89b"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-01-10"
      }
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--8d61e479-4403-5ccf-8301-fc8eecd71836",
      "created": "2026-08-09T01:42:42Z",
      "modified": "2026-08-09T01:42:42Z",
      "x_ally_original_id": "dat:6f122c9e-026f-4348-b335-0d3f85f51dbc",
      "name": "Usernames and account identifiers"
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--a2b7dd9d-0c02-5710-88ed-ea507d0ffa07",
      "created": "2026-08-08T23:12:00Z",
      "modified": "2026-08-08T23:12:00Z",
      "x_ally_original_id": "dat:559cf3f5-80c7-45ba-a930-ff0bfa8d17b0",
      "name": "Names"
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--c79f34f3-405d-57d2-8409-98eff3898231",
      "created": "2026-08-08T23:12:00Z",
      "modified": "2026-08-08T23:12:00Z",
      "x_ally_original_id": "dat:5abcee7e-4a37-494a-b6ba-87ff46149be9",
      "name": "Contact information"
    },
    {
      "type": "x-ally-data-exposure",
      "spec_version": "2.1",
      "id": "x-ally-data-exposure--dcd8f90c-18fe-50d5-85f9-e55dd2c9692b",
      "created": "2026-08-09T06:50:00Z",
      "modified": "2026-08-09T06:50:00Z",
      "x_ally_original_id": "exp:0e2bf79e-550e-4e6d-b04f-ce901a507eca",
      "name": "APOIA.se registration-data exposure"
    },
    {
      "type": "x-ally-notification",
      "spec_version": "2.1",
      "id": "x-ally-notification--02c4e88b-f416-51c0-8d47-094c78b904a1",
      "created": "2026-08-09T06:50:00Z",
      "modified": "2026-08-09T06:50:00Z",
      "x_ally_original_id": "ntf:b972df5e-97b8-423d-ac23-34ef8baa8397",
      "name": "January 2026 APOIA.se customer notification"
    }
  ]
}