{
  "type": "bundle",
  "id": "bundle--0ecd887a-a61c-5fe9-81cb-f79e28143cd8",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--642efd88-6e68-5316-811c-c0799bfb68b3",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "org:e53eefa1-ce78-4744-84b8-9e687c71e32c",
      "name": "Bullhorn",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--276d4656-f8cd-5895-8305-cf51aa5cc9c5",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "inc:77c8e591-5fc5-4cc5-a30b-babb45617b0e",
      "name": "Bullhorn ATS/CRM cyber incident"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--73f2cb7d-f788-586a-8f38-20b4fab3c93d",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "brh:dd8ecdb3-b834-49b4-85ed-5faeea02f1ef",
      "name": "Bullhorn ATS/CRM cyber incident"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--47edbdaa-b6e9-531a-825d-87edc8c8fbc3",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:d50727ce-d7b5-409a-9398-c5e61a6613c9",
      "relationship_type": "resulted-in",
      "source_ref": "incident--276d4656-f8cd-5895-8305-cf51aa5cc9c5",
      "target_ref": "x-ally-event--a53bcffc-c613-55ce-86dc-21bde921d9e8",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Bullhorn",
          "url": "https://status.bullhorn.com/incidents/6ylmf0t08t5j",
          "external_id": "cit:7376e060-ba90-4df6-9ef0-09ec18de4cc6",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:0a13bbb5d141d99fe256657578c690e035ab73ebfe6bd172fd773d88628220b3"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--6a6a0609-7984-5301-886e-5e48f0833a53",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:8b71ca03-6181-41b6-ab24-6005ec4a573e",
      "relationship_type": "affected-organization",
      "source_ref": "incident--276d4656-f8cd-5895-8305-cf51aa5cc9c5",
      "target_ref": "identity--642efd88-6e68-5316-811c-c0799bfb68b3",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Bullhorn",
          "url": "https://status.bullhorn.com/incidents/6ylmf0t08t5j",
          "external_id": "cit:695fac61-7c97-4cef-974a-62e9c90e3e14",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:0a13bbb5d141d99fe256657578c690e035ab73ebfe6bd172fd773d88628220b3"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--c5adf955-5e23-5d5c-8ba1-aba5d747b0d1",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:7071fa74-bee5-4ebb-bbcb-15b1b7257e20",
      "relationship_type": "resulted-in",
      "source_ref": "incident--276d4656-f8cd-5895-8305-cf51aa5cc9c5",
      "target_ref": "x-ally-event--1be0cd0f-2c81-5221-865b-0f0627d6b60c",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Bullhorn",
          "url": "https://status.bullhorn.com/incidents/6ylmf0t08t5j",
          "external_id": "cit:798ab174-764b-4336-8cbc-9a7581a47e18",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:0a13bbb5d141d99fe256657578c690e035ab73ebfe6bd172fd773d88628220b3"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--22b6a529-31ec-52da-89b0-f70127af906f",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:5d24cd11-9b74-44c3-82c0-92875ee5da33",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Bullhorn",
          "url": "https://status.bullhorn.com/incidents/6ylmf0t08t5j",
          "external_id": "cit:44f5932e-f784-49d2-a2bb-4829dee64d72",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:0a13bbb5d141d99fe256657578c690e035ab73ebfe6bd172fd773d88628220b3"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Bullhorn reported a system-wide outage at 08:04 EDT on October 17, after earlier login errors."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--4338bace-a726-59a9-8e48-c326020a8e2d",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:31155ff7-6ed0-4164-9c7c-826a9525c549",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Bullhorn",
          "url": "https://docs.google.com/document/d/e/2PACX-1vT7GyVY26qMXg-HCCp5v7s-QrnGxfGaRCVUgxRVXohcwW-bQI4dx1zUqL8QmnLEnAyTtLucqkHFewuv/pub",
          "external_id": "cit:f74f2e7c-00a6-4bab-86d2-6c02b13cadc4",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:9506c7615eba31f63bbd474eb5eb689f978e5abbae4a3054700adec8edcb47c8"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Bullhorn said removing underlying technology for security reasons required rebuilding features, causing functionality changes and limitations."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--707a6e11-121c-5c21-819f-91afc166be39",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:006867bb-5356-4ae9-81d7-e2513e3f1f97",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Bullhorn",
          "url": "https://docs.google.com/document/d/e/2PACX-1vT7GyVY26qMXg-HCCp5v7s-QrnGxfGaRCVUgxRVXohcwW-bQI4dx1zUqL8QmnLEnAyTtLucqkHFewuv/pub",
          "external_id": "cit:0c2d74f4-b482-4d17-9cd4-8505394cf20d",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:9506c7615eba31f63bbd474eb5eb689f978e5abbae4a3054700adec8edcb47c8"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Bullhorn required non-SSO password resets with two-factor authentication and rotation of API user passwords; its specific Client Secret answer said that rotation was not yet required."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--9cf53497-107e-5ec9-8a8e-49660efe4efd",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:1a54cc3b-a17d-4cb8-86a9-71d9ed734fdd",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Bullhorn",
          "url": "https://docs.google.com/document/d/e/2PACX-1vT7GyVY26qMXg-HCCp5v7s-QrnGxfGaRCVUgxRVXohcwW-bQI4dx1zUqL8QmnLEnAyTtLucqkHFewuv/pub",
          "external_id": "cit:a2186732-2d63-4594-a18f-646887c50635",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:9506c7615eba31f63bbd474eb5eb689f978e5abbae4a3054700adec8edcb47c8"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The FAQ identified ATS/CRM as affected and said it had no indication other Bullhorn solutions were affected by the cyber event; this is separate from precautionary service outages."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--ad16e590-6969-5dfa-81bf-cc14f3f5dba8",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:e69d33ad-9ccc-43ba-83ee-d9ba19263d54",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Bullhorn",
          "url": "https://status.bullhorn.com/incidents/6ylmf0t08t5j",
          "external_id": "cit:3ed3658d-5cde-4e50-b0e5-a93580adf3b2",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:0a13bbb5d141d99fe256657578c690e035ab73ebfe6bd172fd773d88628220b3"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-17"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--bcd25abb-1273-5b32-846a-5e2db6f85484",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:cc3d1455-ad7f-416f-b20a-eeafd34f50ea",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Bullhorn",
          "url": "https://status.bullhorn.com/incidents/6ylmf0t08t5j",
          "external_id": "cit:0a8688b9-601c-472a-acbd-d97510668749",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:0a13bbb5d141d99fe256657578c690e035ab73ebfe6bd172fd773d88628220b3"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Bullhorn confirmed a cyber incident and temporarily disabled access to contain activity, with CrowdStrike specialists assisting."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--c0b76d56-3d0b-5d34-8079-156587be0d10",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:67b814b8-4281-4eef-9ffd-cbf561dcc2ed",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Bullhorn",
          "url": "https://status.bullhorn.com/incidents/6ylmf0t08t5j",
          "external_id": "cit:15a05f3f-aeb5-49f6-be9b-5e8e0c76fcfa",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:0a13bbb5d141d99fe256657578c690e035ab73ebfe6bd172fd773d88628220b3"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "At 09:30 EDT on October 20, Bullhorn reported all ATS/CRM regions online, with monitoring ongoing; some customizations and password-reset issues remained."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--d8f55bfc-6f7d-57e3-8ff9-b2b81be4e082",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:fa997fb7-bbd9-40c7-a953-5e8daa26800f",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Bullhorn",
          "url": "https://status.bullhorn.com/incidents/6ylmf0t08t5j",
          "external_id": "cit:02fcd242-9ce7-4675-b47c-ebe2e42a356d",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:0a13bbb5d141d99fe256657578c690e035ab73ebfe6bd172fd773d88628220b3"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-20"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--e5446707-d5b5-53cd-8a94-bbd33ee8244c",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:0b176829-4ad7-47e0-abad-9dc8ee785964",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Bullhorn",
          "url": "https://status.bullhorn.com/incidents/hh7wp9n3bsb6",
          "external_id": "cit:0109a587-f03b-42dd-b0ba-0023e0094723",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e21e5136f20c235afab278ba87a4dee0942e876d4ff2ed50337ec5676b89b3a0"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Talent Platform access was disabled as a precaution on October 17 and reported restored with monitoring on October 20."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--e909c157-44ed-5603-8730-abc652e03fd9",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:0e27c4da-de4f-41e2-a9d1-3a38b8e0f03d",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Bullhorn",
          "url": "https://docs.google.com/document/d/e/2PACX-1vT7GyVY26qMXg-HCCp5v7s-QrnGxfGaRCVUgxRVXohcwW-bQI4dx1zUqL8QmnLEnAyTtLucqkHFewuv/pub",
          "external_id": "cit:1108bbcc-6c1c-44a1-b859-87cf357d2a08",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:9506c7615eba31f63bbd474eb5eb689f978e5abbae4a3054700adec8edcb47c8"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Bullhorn had not determined whether customer data was exfiltrated as of its October 20 08:50 ET FAQ."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--f6fef02c-41e1-5f03-89bc-91caf28ff625",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:468b7e67-649f-4819-86ef-30a4395e2e93",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Bullhorn",
          "url": "https://status.bullhorn.com/incidents/6ylmf0t08t5j",
          "external_id": "cit:a2f67f32-c34e-4c64-b1cf-4e5ac28a12c4",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:0a13bbb5d141d99fe256657578c690e035ab73ebfe6bd172fd773d88628220b3"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-17"
      }
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--1be0cd0f-2c81-5221-865b-0f0627d6b60c",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "evt:822388d1-9e31-410e-82a1-501c9aa12a84",
      "name": "Regional access restored with remaining limitations"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--a53bcffc-c613-55ce-86dc-21bde921d9e8",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "evt:360acbf3-7299-409a-b993-8654eb94de98",
      "name": "Outage and cyber incident confirmed"
    }
  ]
}