{
  "type": "bundle",
  "id": "bundle--3b77675c-e525-560b-8a10-36107c578488",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--e0cc0798-7f86-5267-8822-aea869e0d230",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "org:9556e1ad-37f6-4ee6-b79c-1f60969ceb05",
      "name": "RAKUS Light Cloud",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--54c0261c-19e9-5ea6-8f6e-e247f0c999ae",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "inc:06520dc0-f4db-48cc-9f68-07294154f033",
      "name": "blastmail API-server data theft"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--a2762f86-92df-54b2-8108-0880a05a7c38",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "brh:4c582d9f-c237-4c68-9108-400c1a505e2a",
      "name": "blastmail API-server data theft"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--97f386cf-f7a5-5179-8204-69d134e42a97",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "clm:93ad5eed-905e-4289-b608-3fb5b6f1c990",
      "relationship_type": "affected-organization",
      "source_ref": "incident--54c0261c-19e9-5ea6-8f6e-e247f0c999ae",
      "target_ref": "identity--e0cc0798-7f86-5267-8822-aea869e0d230",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "RAKUS",
          "url": "https://www.rakus.co.jp/news/2026/1021-3.html",
          "external_id": "cit:eab5f2df-cdb4-410c-894b-0299b7d6bb77",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:9f4d45d2765dae0adb2c8ea915e5758bd0b94aea5bbc1ae63446b2b419aa5271"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--a8d25dc0-008c-570b-8701-fef565ecac51",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "clm:3cf55c09-88a4-4914-9c05-7d39c52fdd88",
      "relationship_type": "resulted-in",
      "source_ref": "incident--54c0261c-19e9-5ea6-8f6e-e247f0c999ae",
      "target_ref": "x-ally-event--8b49c138-3564-5718-8176-28700ad2df3c",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "RAKUS",
          "url": "https://www.rakus.co.jp/news/2026/1021-3.html",
          "external_id": "cit:4b76765b-c0a2-4677-8fbf-e52d3f728f9f",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:9f4d45d2765dae0adb2c8ea915e5758bd0b94aea5bbc1ae63446b2b419aa5271"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--1d42cadf-738a-566b-86a2-e35955ba30c2",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "clm:1dc763b0-0a54-47ad-b48a-7ef2d17fce01",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "RAKUS",
          "url": "https://www.rakus.co.jp/news/2026/1021-3.html",
          "external_id": "cit:20bd6605-5ab4-4602-8f69-578afc5ecd94",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:9f4d45d2765dae0adb2c8ea915e5758bd0b94aea5bbc1ae63446b2b419aa5271"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-21"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--672eb623-2214-5d93-84e5-05454f8fe501",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "clm:d8322c23-b459-4ea0-925b-d4a885aa3c98",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "RAKUS",
          "url": "https://www.rakus.co.jp/news/2026/1021-3.html",
          "external_id": "cit:9b264de6-cfcb-4f05-95a9-2f7b379f54d3",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:9f4d45d2765dae0adb2c8ea915e5758bd0b94aea5bbc1ae63446b2b419aa5271"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "RAKUS confirmed that an external party entered two RAKUS Light Cloud API servers, executed commands and connected to the sales-management system and service database to take data."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--70517240-9e8f-5853-8c4b-7a723522d51c",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "clm:6eafb35c-0fe9-415a-a1f7-c7142f0f81f4",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "RAKUS",
          "url": "https://www.rakus.co.jp/news/2026/1021-3.html",
          "external_id": "cit:c0967507-3efb-4b61-8bc9-5d3d0bbb19b5",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:9f4d45d2765dae0adb2c8ea915e5758bd0b94aea5bbc1ae63446b2b419aa5271"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Recipient lists and other email-delivery information were also leaked for some customers; the detailed customer-specific scope remained under investigation."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--7416970c-1588-57f0-8f45-87a2204a5820",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "clm:df4160e8-307c-474b-9bc7-18a11e7e5bcb",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "RAKUS",
          "url": "https://www.rakus.co.jp/news/2026/1021-3.html",
          "external_id": "cit:1ee24069-f35d-4fa5-a668-a2e745d03081",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:9f4d45d2765dae0adb2c8ea915e5758bd0b94aea5bbc1ae63446b2b419aa5271"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "RAKUS was checking system safety, investigating the entry route and notifying affected customers individually as the scope was established."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--8514fdb1-c718-5b1a-8534-3e1eddbf8ce5",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "clm:667e2e80-ea4d-40f8-8e6f-6d3935fb787c",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "RAKUS",
          "url": "https://www.rakus.co.jp/news/2026/1021-3.html",
          "external_id": "cit:af2933e5-e30a-475e-905d-33015d83f285",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:9f4d45d2765dae0adb2c8ea915e5758bd0b94aea5bbc1ae63446b2b419aa5271"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Information taken for all contracting customers included company and contact names, telephone numbers, email and billing-email addresses, and contract/payment history. RAKUS said the subsidiary did not hold credit-card numbers."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--ae2f896e-324c-5611-8dd4-129f31e36ee5",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "clm:fb4f9eaa-c712-4ff4-a267-38884fa86d7e",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "RAKUS",
          "url": "https://www.rakus.co.jp/news/2026/1021-3.html",
          "external_id": "cit:5f2a5502-7d53-439d-b023-90c88a9c0198",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:9f4d45d2765dae0adb2c8ea915e5758bd0b94aea5bbc1ae63446b2b419aa5271"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-21"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--c08c0b1a-c22d-5dd1-8c11-47128c7edd53",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "clm:4009cef6-384a-4f3b-9a62-6eee37e75828",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "RAKUS",
          "url": "https://www.rakus.co.jp/news/2026/1021-3.html",
          "external_id": "cit:2f9050a1-f67d-41e3-b416-e4e5e60f1dc5",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:9f4d45d2765dae0adb2c8ea915e5758bd0b94aea5bbc1ae63446b2b419aa5271"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The blastmail service was stopped from October 21 at 00:30 Japan time and remained unavailable in the second report; no restart time was set."
      }
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--8b49c138-3564-5718-8176-28700ad2df3c",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "evt:3c974018-e119-4d90-935f-696574547c87",
      "name": "Service halted and data theft disclosed"
    }
  ]
}