{
  "type": "bundle",
  "id": "bundle--ebd5e6e9-e16d-5e0e-8a78-1721108468a5",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--8451605f-b1bc-500e-82de-08c78ea9cac5",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "org:41b27e2f-1d1e-5a8e-b5d4-0c64a442977b",
      "name": "MKS Instruments",
      "identity_class": "organization"
    },
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--9c2f3df9-9a42-5278-8195-1680325f6a28",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "org:b6292474-ec5f-514e-8d00-2d04ccf4c3a3",
      "name": "Applied Materials",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--06d90c8c-780a-569e-85b7-6bf655743fe3",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "inc:58fc4954-3507-5a7a-9965-88ab7581b1f1",
      "name": "Applied Materials (via supplier MKS Instruments) security incident"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--fd1c4205-9b8f-5f04-8c8d-29bdfe870880",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "brh:9d85557e-9f3b-50fb-b0b1-b1e647724565",
      "name": "Applied Materials (via supplier MKS Instruments) security incident"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--89be5b1b-13cd-5844-8493-9dbc9f9626b4",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "clm:c71c8c66-e935-5253-9341-2d5b3d00db12",
      "relationship_type": "affected-organization",
      "source_ref": "incident--06d90c8c-780a-569e-85b7-6bf655743fe3",
      "target_ref": "identity--8451605f-b1bc-500e-82de-08c78ea9cac5",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "MKS Instruments, Inc.",
          "url": "https://www.sec.gov/Archives/edgar/data/1049502/000095017023038457/mksi-20230630.htm",
          "external_id": "cit:128bf886-0fe8-5f66-be74-e1437d36ec2e",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:46ad184bb7ea3f9c6b5ef14feaf0193fa9d9bd56815c54bca3d3cab64dc07a03"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--fad8c215-62da-5dc2-8acd-ef6901beaace",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "clm:dab47a09-6be9-5b71-8a61-42d4625d08f0",
      "relationship_type": "affected-organization",
      "source_ref": "incident--06d90c8c-780a-569e-85b7-6bf655743fe3",
      "target_ref": "identity--9c2f3df9-9a42-5278-8195-1680325f6a28",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "MKS Instruments, Inc.",
          "url": "https://www.sec.gov/Archives/edgar/data/1049502/000095017023038457/mksi-20230630.htm",
          "external_id": "cit:b24ceb21-382c-5c9d-b55e-b354d6148959",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:46ad184bb7ea3f9c6b5ef14feaf0193fa9d9bd56815c54bca3d3cab64dc07a03"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--2a50c962-de82-512e-861f-e1caa09609ef",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:95c9b4b0-f489-57d1-8be0-5c6b4a8e7adb",
      "confidence": 90,
      "external_references": [
        {
          "source_name": "MKS Instruments, Inc.",
          "url": "https://www.sec.gov/Archives/edgar/data/1049502/000095017023038457/mksi-20230630.htm",
          "external_id": "cit:6d74d6ee-65eb-5ac2-8e6b-7ed3246cb669",
          "description": "We then initiated the recovery phase, contained the incident, and have since reopened our affected manufacturing and service operations and completed restoration of virtually all of our information technology (“IT”) systems, including our enterprise resource planning systems.",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:46ad184bb7ea3f9c6b5ef14feaf0193fa9d9bd56815c54bca3d3cab64dc07a03"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The retained source describes containment action intended to limit further access or disruption."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--5ea25518-926f-5b33-8be2-d479be7e5dcc",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:7bc147b1-c0b6-5813-962d-48d6de9cfc04",
      "confidence": 90,
      "external_references": [
        {
          "source_name": "MKS Instruments, Inc.",
          "url": "https://www.sec.gov/Archives/edgar/data/1049502/000095017023038457/mksi-20230630.htm",
          "external_id": "cit:8865c3df-da6c-5985-962f-24a7fc041b9f",
          "description": "We then initiated the recovery phase, contained the incident, and have since reopened our affected manufacturing and service operations and completed restoration of virtually all of our information technology (“IT”) systems, including our enterprise resource planning systems.",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:46ad184bb7ea3f9c6b5ef14feaf0193fa9d9bd56815c54bca3d3cab64dc07a03"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The retained source describes system restoration or operational recovery work."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--65dd1bf1-a15e-5837-8e30-1a2e8de5b5cb",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:4ad041ba-17a9-53c8-ba96-ffbae370fcea",
      "confidence": 95,
      "external_references": [
        {
          "source_name": "MKS Instruments, Inc.",
          "url": "https://www.sec.gov/Archives/edgar/data/1049502/000095017023038457/mksi-20230630.htm",
          "external_id": "cit:4aeacb6c-64bb-585f-965e-f6e2feb5824b",
          "description": "This Quarterly Report on Form 10-Q contains “forward-looking statements” within the meaning of the Private Securities Litigation Reform Act of 1995, Section 27A of the Securities Act of 1933 and Section 21E of the Securities Exchange Act of 1934 regarding the future financial performance, business prospects and growth of MKS Instruments, Inc. (“MKS”, the “Company,” “our,” or “we”), and the impact of the ransomware event we identified on February 3, 2023, including our ability to fulfill orders that were delayed by the ransomware event, and the expected impact on our revenues as a result of fulfilling such delayed orders.",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:46ad184bb7ea3f9c6b5ef14feaf0193fa9d9bd56815c54bca3d3cab64dc07a03"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Ransomware at MKS Instruments."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--878a8923-ce81-553e-8ade-b5839e4221c2",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:5e8484d6-e722-5f36-a8ce-70ca89a116f0",
      "confidence": 90,
      "external_references": [],
      "x_ally_claim_object": {
        "kind": "iri",
        "value": "https://attack.mitre.org/techniques/T1486/"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--c78b02ac-5913-56be-88d8-942b73659a1a",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:f954a24a-d621-543d-a0ab-3c7eada84840",
      "confidence": 84,
      "external_references": [
        {
          "source_name": "MKS Instruments, Inc.",
          "url": "https://www.sec.gov/Archives/edgar/data/1049502/000095017023038457/mksi-20230630.htm",
          "external_id": "cit:df65fa6f-b815-5113-b97e-6d8d74dfb674",
          "description": "A roll-forward of the Company’s deferred revenue and customer advances is as follows:",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:46ad184bb7ea3f9c6b5ef14feaf0193fa9d9bd56815c54bca3d3cab64dc07a03"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Supplier outage cascaded into customer's shipments."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--f5a715d2-984a-5ad0-882c-4dcae6bdbc6f",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "clm:87ae4cb9-6eec-569c-942c-ec385a03889d",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "MKS Instruments, Inc.",
          "url": "https://www.sec.gov/Archives/edgar/data/1049502/000095017023038457/mksi-20230630.htm",
          "external_id": "cit:72c27284-058a-5994-b60d-afe4f3fc9b20",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:46ad184bb7ea3f9c6b5ef14feaf0193fa9d9bd56815c54bca3d3cab64dc07a03"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The reviewed source documents the applied materials (via supplier mks instruments) security incident involving Applied Materials, MKS Instruments."
      }
    }
  ]
}