{
  "type": "bundle",
  "id": "bundle--4d363b5a-2118-5177-8ec8-fa8ee46369ca",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--e9f9533b-9852-5819-8b0d-c24ae4093d52",
      "created": "2026-08-09T05:59:12Z",
      "modified": "2026-08-09T05:59:12Z",
      "x_ally_original_id": "org:66207166-144a-4df8-aff3-0698340e003d",
      "name": "BreachForums (.hn iteration)",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--4b80ca8a-d9a9-5c6b-8249-5b55462437cd",
      "created": "2026-08-09T05:59:12Z",
      "modified": "2026-08-09T05:59:12Z",
      "x_ally_original_id": "brh:fdf11e9c-d1fb-484f-aefe-8f667824da42",
      "name": "BreachForums user-database exposure"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--b3bf2eea-ee01-5e0f-8ccd-a602d49b4a09",
      "created": "2026-08-09T05:59:12Z",
      "modified": "2026-08-09T05:59:12Z",
      "x_ally_original_id": "inc:88331435-6031-4d30-a4dc-059322187e01",
      "name": "2025 BreachForums user-database exposure"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--342c46d3-87ba-5eb6-852c-003ef560efd2",
      "created": "2026-08-09T05:59:12Z",
      "modified": "2026-08-09T05:59:12Z",
      "x_ally_original_id": "clm:2272c141-5a92-41a2-8cf1-23a1a407b75b",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--86e2e071-d7dc-53f5-861c-d01abe8e82fa",
      "target_ref": "x-ally-data-category--1acc2320-3d84-5ebd-8574-aeda793f94fe",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Have I Been Pwned",
          "url": "https://haveibeenpwned.com/api/v3/breach/BreachForums2025",
          "external_id": "cit:0e52319b-976c-449a-8a7f-b6df8ecbbd49",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:80dbf30260f1a7ae788ee9847e75ff31090463c70db1b0faf01fbd662cccfb7b"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--79f8765c-4057-5a3b-8ae0-3f2fb5ed0bd6",
      "created": "2026-08-09T05:59:12Z",
      "modified": "2026-08-09T05:59:12Z",
      "x_ally_original_id": "clm:872a4c5e-0caf-4bcb-b5df-9f44662a85b6",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--86e2e071-d7dc-53f5-861c-d01abe8e82fa",
      "target_ref": "x-ally-data-category--8d61e479-4403-5ccf-8301-fc8eecd71836",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "BleepingComputer",
          "url": "https://www.bleepingcomputer.com/news/security/breachforums-hacking-forum-database-leaked-exposing-324-000-accounts/",
          "external_id": "cit:4fc65ca5-1f72-4f08-8f2c-7076c500a50c",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:58951eb841c49db141e3c89d9a1bcf50238c1ab4c325c0a87484ec081f4dedb3"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--8da68587-bbdf-5c1c-818d-7bd3e7b0d93f",
      "created": "2026-08-09T05:59:12Z",
      "modified": "2026-08-09T05:59:12Z",
      "x_ally_original_id": "clm:6bd0bb1e-f4c8-4f47-a103-57d5dbcfb9f6",
      "relationship_type": "affected-organization",
      "source_ref": "incident--b3bf2eea-ee01-5e0f-8ccd-a602d49b4a09",
      "target_ref": "identity--e9f9533b-9852-5819-8b0d-c24ae4093d52",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "BleepingComputer",
          "url": "https://www.bleepingcomputer.com/news/security/breachforums-hacking-forum-database-leaked-exposing-324-000-accounts/",
          "external_id": "cit:78eb65a3-2965-4084-b357-072e06fc57c9",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:58951eb841c49db141e3c89d9a1bcf50238c1ab4c325c0a87484ec081f4dedb3"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--b2a072be-7044-5a8d-83b8-5f993af682ec",
      "created": "2026-08-09T05:59:12Z",
      "modified": "2026-08-09T05:59:12Z",
      "x_ally_original_id": "clm:2a78a6aa-5e00-4d47-966d-856bb0a0f2f0",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--86e2e071-d7dc-53f5-861c-d01abe8e82fa",
      "target_ref": "x-ally-data-category--c79f34f3-405d-57d2-8409-98eff3898231",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Have I Been Pwned",
          "url": "https://haveibeenpwned.com/api/v3/breach/BreachForums2025",
          "external_id": "cit:34fcef80-b8a4-49ef-b1e4-8fb5e353b5a5",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:80dbf30260f1a7ae788ee9847e75ff31090463c70db1b0faf01fbd662cccfb7b"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--bd06304f-aaad-5332-822b-8df22036d5e5",
      "created": "2026-08-09T05:59:12Z",
      "modified": "2026-08-09T05:59:12Z",
      "x_ally_original_id": "clm:7dd22bbb-c4f9-4d18-a1f7-04d6c4212a6c",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--86e2e071-d7dc-53f5-861c-d01abe8e82fa",
      "target_ref": "x-ally-data-category--72153833-bd67-543e-8613-f0948694cf4a",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "BleepingComputer",
          "url": "https://www.bleepingcomputer.com/news/security/breachforums-hacking-forum-database-leaked-exposing-324-000-accounts/",
          "external_id": "cit:265da21d-ea1a-4cc7-a084-f6c58823e6c6",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:58951eb841c49db141e3c89d9a1bcf50238c1ab4c325c0a87484ec081f4dedb3"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--c2b942b6-c08b-5440-8260-5d2733fae370",
      "created": "2026-08-09T05:59:12Z",
      "modified": "2026-08-09T05:59:12Z",
      "x_ally_original_id": "clm:d77c1340-3a45-4947-9120-c1c16f248a61",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--86e2e071-d7dc-53f5-861c-d01abe8e82fa",
      "target_ref": "x-ally-data-category--05e2e501-a627-5fd9-8973-d3d458231f93",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Have I Been Pwned",
          "url": "https://haveibeenpwned.com/api/v3/breach/BreachForums2025",
          "external_id": "cit:cff9b573-ed0b-497e-b2c0-812b7ac1cbd9",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:80dbf30260f1a7ae788ee9847e75ff31090463c70db1b0faf01fbd662cccfb7b"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--f5a54301-b3e5-5f19-8faa-bf4b92b125d5",
      "created": "2026-08-09T05:59:12Z",
      "modified": "2026-08-09T05:59:12Z",
      "x_ally_original_id": "clm:9e0635d0-fdd0-43e8-b4d4-5333656714c7",
      "relationship_type": "resulted-in",
      "source_ref": "incident--b3bf2eea-ee01-5e0f-8ccd-a602d49b4a09",
      "target_ref": "x-ally-data-exposure--86e2e071-d7dc-53f5-861c-d01abe8e82fa",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "BleepingComputer",
          "url": "https://www.bleepingcomputer.com/news/security/breachforums-hacking-forum-database-leaked-exposing-324-000-accounts/",
          "external_id": "cit:89be55b8-1b27-4c6a-965c-4f28a43338a0",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:58951eb841c49db141e3c89d9a1bcf50238c1ab4c325c0a87484ec081f4dedb3"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--311d545e-8aa0-5424-8799-07a8b8b4b0a4",
      "created": "2026-08-09T05:59:12Z",
      "modified": "2026-08-09T05:59:12Z",
      "x_ally_original_id": "clm:07bf4c95-c913-49e0-9ee1-e266c4772eb4",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Have I Been Pwned",
          "url": "https://haveibeenpwned.com/api/v3/breach/BreachForums2025",
          "external_id": "cit:fca173e5-401a-4c5d-8b65-c3b871c87fbf",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:80dbf30260f1a7ae788ee9847e75ff31090463c70db1b0faf01fbd662cccfb7b"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "integer",
        "value": 672247,
        "unit": "record"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--37dd54ed-8016-5588-8468-c73f506ac93c",
      "created": "2026-08-09T05:59:12Z",
      "modified": "2026-08-09T05:59:12Z",
      "x_ally_original_id": "clm:8d81ca8a-bebf-4a07-a399-ed661dde0178",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "BleepingComputer",
          "url": "https://www.bleepingcomputer.com/news/security/breachforums-hacking-forum-database-leaked-exposing-324-000-accounts/",
          "external_id": "cit:eb5d2d90-26f1-4023-b2bf-5f9c1916d4a0",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:58951eb841c49db141e3c89d9a1bcf50238c1ab4c325c0a87484ec081f4dedb3"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The exposed signing-key file was passphrase-protected when BleepingComputer first analyzed it; the repository does not retain the key or any password later reported for it."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--6f90e83b-edb4-5d33-87d9-5674439b98b2",
      "created": "2026-08-09T05:59:12Z",
      "modified": "2026-08-09T05:59:12Z",
      "x_ally_original_id": "clm:0ca5e34a-ab32-4049-9750-095f6b1a2d54",
      "confidence": 90,
      "external_references": [
        {
          "source_name": "BleepingComputer",
          "url": "https://www.bleepingcomputer.com/news/security/breachforums-hacking-forum-database-leaked-exposing-324-000-accounts/",
          "external_id": "cit:1031a784-96e1-45f2-8267-c44b12ca1171",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:58951eb841c49db141e3c89d9a1bcf50238c1ab4c325c0a87484ec081f4dedb3"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-01-09"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--71038d6a-3f7a-5b73-8dfd-7f392bbf4d01",
      "created": "2026-08-09T05:59:12Z",
      "modified": "2026-08-09T05:59:12Z",
      "x_ally_original_id": "clm:c5c46905-7d0d-4bbc-98fd-e353dc2ac248",
      "confidence": 90,
      "external_references": [
        {
          "source_name": "BleepingComputer",
          "url": "https://www.bleepingcomputer.com/news/security/breachforums-hacking-forum-database-leaked-exposing-324-000-accounts/",
          "external_id": "cit:b0eaac5a-0f3c-4fd5-8afd-6bdfbceb3846",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:58951eb841c49db141e3c89d9a1bcf50238c1ab4c325c0a87484ec081f4dedb3"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The current forum administrator acknowledged that an old MyBB user-table backup and the forum PGP key had been temporarily stored in an unsecured folder and said the folder was downloaded once."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--a3bd909b-d1b2-58ad-8e20-5d81272a5cfc",
      "created": "2026-08-09T05:59:12Z",
      "modified": "2026-08-09T05:59:12Z",
      "x_ally_original_id": "clm:67cf533a-95ff-4dfb-bd43-122be09c69df",
      "confidence": 80,
      "external_references": [
        {
          "source_name": "Have I Been Pwned",
          "url": "https://haveibeenpwned.com/api/v3/breach/BreachForums2025",
          "external_id": "cit:0d0ca6b8-647c-44be-a18b-e5e4185db2e8",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:80dbf30260f1a7ae788ee9847e75ff31090463c70db1b0faf01fbd662cccfb7b"
        },
        {
          "source_name": "BleepingComputer",
          "url": "https://www.bleepingcomputer.com/news/security/breachforums-hacking-forum-database-leaked-exposing-324-000-accounts/",
          "external_id": "cit:ffa2ef0c-7b35-4a9f-82c2-91bc3ca4895e",
          "x_ally_stance": "qualifies",
          "x_ally_snapshot_id": "snp:sha256:58951eb841c49db141e3c89d9a1bcf50238c1ab4c325c0a87484ec081f4dedb3"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2025-08-11"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--b34d2e5d-6d8e-56fa-8f07-75bf99f82ad9",
      "created": "2026-08-09T05:59:12Z",
      "modified": "2026-08-09T05:59:12Z",
      "x_ally_original_id": "clm:edeb73e9-185d-4c04-806e-5b36de2872c0",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "BleepingComputer",
          "url": "https://www.bleepingcomputer.com/news/security/breachforums-hacking-forum-database-leaked-exposing-324-000-accounts/",
          "external_id": "cit:0f268549-1687-4776-9043-a0e4382d8943",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:58951eb841c49db141e3c89d9a1bcf50238c1ab4c325c0a87484ec081f4dedb3"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "integer",
        "value": 70296,
        "unit": "record"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--ca843a2e-5306-579e-8cc2-5ff803baec67",
      "created": "2026-08-09T05:59:12Z",
      "modified": "2026-08-09T05:59:12Z",
      "x_ally_original_id": "clm:d9f79b07-a55e-4983-8c24-9bc8f3ad8b67",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "BleepingComputer",
          "url": "https://www.bleepingcomputer.com/news/security/breachforums-hacking-forum-database-leaked-exposing-324-000-accounts/",
          "external_id": "cit:5b06f0b0-fe27-4c06-830f-a898ae913476",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:58951eb841c49db141e3c89d9a1bcf50238c1ab4c325c0a87484ec081f4dedb3"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "integer",
        "value": 323988,
        "unit": "record"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--fd78c2e5-f6a4-548f-8022-2ce5e28a5a4b",
      "created": "2026-08-09T05:59:12Z",
      "modified": "2026-08-09T05:59:12Z",
      "x_ally_original_id": "clm:7028f27f-782e-4ca6-a9f5-bdf1786e7c42",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "BleepingComputer",
          "url": "https://www.bleepingcomputer.com/news/security/breachforums-hacking-forum-database-leaked-exposing-324-000-accounts/",
          "external_id": "cit:02ac7d2c-e9e1-4761-bd86-f96e0aa19290",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:58951eb841c49db141e3c89d9a1bcf50238c1ab4c325c0a87484ec081f4dedb3"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "A publicly released archive contained the MyBB user-table SQL dump, text about the release, and the forum's PGP private-key file."
      }
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--05e2e501-a627-5fd9-8973-d3d458231f93",
      "created": "2026-08-09T01:12:00Z",
      "modified": "2026-08-09T01:12:00Z",
      "x_ally_original_id": "dat:7290ba39-bdce-4ff7-8087-56e370cd91c5",
      "name": "Account credentials"
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--1acc2320-3d84-5ebd-8574-aeda793f94fe",
      "created": "2026-08-09T01:42:42Z",
      "modified": "2026-08-09T01:42:42Z",
      "x_ally_original_id": "dat:4830b7b8-6b10-4665-8955-040ac39d50b0",
      "name": "Message content"
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--72153833-bd67-543e-8613-f0948694cf4a",
      "created": "2026-08-09T04:22:59Z",
      "modified": "2026-08-09T04:22:59Z",
      "x_ally_original_id": "dat:5fa04562-6078-4a17-ae1b-d0583129fd47",
      "name": "IP addresses"
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--8d61e479-4403-5ccf-8301-fc8eecd71836",
      "created": "2026-08-09T01:42:42Z",
      "modified": "2026-08-09T01:42:42Z",
      "x_ally_original_id": "dat:6f122c9e-026f-4348-b335-0d3f85f51dbc",
      "name": "Usernames and account identifiers"
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--c79f34f3-405d-57d2-8409-98eff3898231",
      "created": "2026-08-08T23:12:00Z",
      "modified": "2026-08-08T23:12:00Z",
      "x_ally_original_id": "dat:5abcee7e-4a37-494a-b6ba-87ff46149be9",
      "name": "Contact information"
    },
    {
      "type": "x-ally-data-exposure",
      "spec_version": "2.1",
      "id": "x-ally-data-exposure--86e2e071-d7dc-53f5-861c-d01abe8e82fa",
      "created": "2026-08-09T05:59:12Z",
      "modified": "2026-08-09T05:59:12Z",
      "x_ally_original_id": "exp:f24daf33-43db-4b3e-a78f-df3e642c4fb2",
      "name": "BreachForums user and message-data exposure"
    }
  ]
}