{
  "type": "bundle",
  "id": "bundle--5634d4f0-cddd-5f10-891a-09da8a8807bc",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--76f7c910-7d33-580a-8cd8-bb266400f75b",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "org:9a899065-1855-4618-8926-374515391185",
      "name": "Chainstack",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--16e346e1-0603-5349-8327-9a883a5c704c",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "brh:ade2208e-613a-4123-a3f5-3715fa5a1f2e",
      "name": "Chainstack account and node-credential incident"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--6ca5e911-64df-5558-8796-b251db397f39",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "inc:e305d393-b5d9-450e-b6cb-22c0e9e238e9",
      "name": "Chainstack account and node-credential incident"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--08523d8c-379b-5cfa-81bb-c145b20f174f",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:505976ae-ceb5-46e2-b1a1-734991b4662b",
      "relationship_type": "resulted-in",
      "source_ref": "incident--6ca5e911-64df-5558-8796-b251db397f39",
      "target_ref": "x-ally-event--8e3118f3-e6b8-532b-8074-3e3406d8d338",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Chainstack",
          "url": "https://chainstack.com/security-incident-nov-2026/",
          "external_id": "cit:677c99ea-1f46-4c0b-aa81-6c8312034409",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5b56c81660966f456b697a6bd8c773f1fe26e14ce6d0670850465530208f0175"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--19676754-f97d-538d-8d11-38d8a717c6ad",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:abc160dc-52d0-472e-a47e-5433e8ae0319",
      "relationship_type": "affected-organization",
      "source_ref": "incident--6ca5e911-64df-5558-8796-b251db397f39",
      "target_ref": "identity--76f7c910-7d33-580a-8cd8-bb266400f75b",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Chainstack",
          "url": "https://chainstack.com/security-incident-nov-2026/",
          "external_id": "cit:94b174ed-931c-49c8-800a-0f7d3ae63411",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5b56c81660966f456b697a6bd8c773f1fe26e14ce6d0670850465530208f0175"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--282874e8-7261-5af1-88de-5832db1af90c",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:ff356327-ea8d-42cd-9928-cbb10e2c446e",
      "relationship_type": "resulted-in",
      "source_ref": "incident--6ca5e911-64df-5558-8796-b251db397f39",
      "target_ref": "x-ally-event--53199c61-3ad7-5abe-8bc3-fd831fe09b7c",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Chainstack",
          "url": "https://chainstack.com/security-incident-nov-2026/",
          "external_id": "cit:0def7dea-46bc-4c4a-a0dc-c696150d3991",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5b56c81660966f456b697a6bd8c773f1fe26e14ce6d0670850465530208f0175"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--593efc74-9a93-5ccc-892a-cb8024ea8b10",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:10964695-9881-41d3-907a-47fd7191994e",
      "relationship_type": "resulted-in",
      "source_ref": "incident--6ca5e911-64df-5558-8796-b251db397f39",
      "target_ref": "x-ally-event--4e015b12-56a9-5523-80c7-6271bfc345da",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Chainstack",
          "url": "https://chainstack.com/security-incident-nov-2026/",
          "external_id": "cit:2e14dc6d-6d32-499f-816b-99d8414195f3",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5b56c81660966f456b697a6bd8c773f1fe26e14ce6d0670850465530208f0175"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--b3df3f12-5355-52fc-8110-4836ac1941e2",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:b25d8cfe-379f-4b44-baff-2f0d67878579",
      "relationship_type": "resulted-in",
      "source_ref": "incident--6ca5e911-64df-5558-8796-b251db397f39",
      "target_ref": "x-ally-event--8c922968-408d-5b02-8297-c81f84bab113",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Chainstack",
          "url": "https://chainstack.com/security-incident-nov-2026/",
          "external_id": "cit:af37e97a-da4d-4221-aac6-39f2e3e55965",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5b56c81660966f456b697a6bd8c773f1fe26e14ce6d0670850465530208f0175"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--238a431c-bb05-5c39-8886-f1d10d876633",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:ccd0c49b-953e-40ee-b2ca-2c97120d43da",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Chainstack",
          "url": "https://chainstack.com/security-incident-nov-2026/",
          "external_id": "cit:1aa2cce6-2f3e-4391-857a-1e2e90d5d288",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5b56c81660966f456b697a6bd8c773f1fe26e14ce6d0670850465530208f0175"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Chainstack said customer services continued normally and nodes, the console and API were not modified."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--33939426-03e9-5fd7-8442-b8c74c865e06",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:7c3bfdeb-063f-488a-a53e-16fc56f5ee23",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Chainstack",
          "url": "https://chainstack.com/security-incident-nov-2026/",
          "external_id": "cit:7300cb58-9d11-4b6f-9742-a13176da9125",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5b56c81660966f456b697a6bd8c773f1fe26e14ce6d0670850465530208f0175"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-31"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--3ea6cbd1-d929-5b5b-8acc-2778a7431018",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:3b15321f-e08e-4b87-8766-e445aaf77893",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Chainstack",
          "url": "https://chainstack.com/security-incident-nov-2026/",
          "external_id": "cit:a93ff767-059a-4f12-9682-463d0994e411",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5b56c81660966f456b697a6bd8c773f1fe26e14ce6d0670850465530208f0175"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Chainstack cut access on October 31 and closed its investigation on November 2. Customers were asked to change passwords, rotate node credentials and regenerate platform API keys."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--5a5ae7cc-dfb5-5525-8197-7c6abb06e9b8",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:bcdb06ad-8231-4707-9328-e38df14ce303",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Chainstack",
          "url": "https://chainstack.com/security-incident-nov-2026/",
          "external_id": "cit:a4780323-c5fd-404b-8ea5-f949f9a430d4",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5b56c81660966f456b697a6bd8c773f1fe26e14ce6d0670850465530208f0175"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-26"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--5addadcb-a931-5b97-84ff-0fdd862a6f49",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:d4877ae8-5420-4419-9a44-cc3782aeab42",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Chainstack",
          "url": "https://chainstack.com/security-incident-nov-2026/",
          "external_id": "cit:83876bac-4f39-4f85-a3a4-a35496826605",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5b56c81660966f456b697a6bd8c773f1fe26e14ce6d0670850465530208f0175"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Chainstack reported an intrusion that reached development infrastructure on October 26, 2026, and parts of production on October 29."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--5de73c16-b0f8-5174-8f43-b01a2bd0ed41",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:8d663af5-24df-4759-9e14-301def0a2035",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Chainstack",
          "url": "https://chainstack.com/security-incident-nov-2026/",
          "external_id": "cit:343aa9c9-d26e-44c7-ba60-8e7f512d4020",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5b56c81660966f456b697a6bd8c773f1fe26e14ce6d0670850465530208f0175"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-31"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--a6fe11cf-f7f2-5a05-85a8-5bdb2ef1f7a4",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:e58ba4a4-d146-46e1-9030-dabff4ce24bf",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Chainstack",
          "url": "https://chainstack.com/security-incident-nov-2026/",
          "external_id": "cit:2e9fe9ef-d6a3-4a66-a23a-8c31a0756303",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5b56c81660966f456b697a6bd8c773f1fe26e14ce6d0670850465530208f0175"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The company identified a third-party component as the access path, without naming it or establishing a specific vulnerability."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--ac59349d-4a1f-5610-8fb7-0fba3ccd8bdf",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:7a6edd55-8489-4189-ad75-9d402bc10a49",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Chainstack",
          "url": "https://chainstack.com/security-incident-nov-2026/",
          "external_id": "cit:a7a8330a-920d-42e7-a904-c2fbc5d58fa6",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5b56c81660966f456b697a6bd8c773f1fe26e14ce6d0670850465530208f0175"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-29"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--af60ac93-f17d-53d9-836e-ef54b3dc316e",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:faa0e833-a38f-4af4-acc4-5dd547e8486d",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Chainstack",
          "url": "https://chainstack.com/security-incident-nov-2026/",
          "external_id": "cit:bf5af7a5-4232-4007-9341-50bcbb02854b",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5b56c81660966f456b697a6bd8c773f1fe26e14ce6d0670850465530208f0175"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-11-03"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--ec28d9ed-7737-5ee8-81c7-2c90cfd13d5b",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:bc4daec4-8cc1-43da-8b9a-dec5d2d0779d",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Chainstack",
          "url": "https://chainstack.com/security-incident-nov-2026/",
          "external_id": "cit:e522d3c4-a605-407f-9b2c-ac5069fa965a",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5b56c81660966f456b697a6bd8c773f1fe26e14ce6d0670850465530208f0175"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "An accessed database held organization and account-holder names, member email addresses and password hashes. Node credentials were treated as exposed despite no evidence they were read."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--f10bc5ab-f8af-534c-8624-a2a669c91a9a",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:d0d1d5d5-808a-4a32-bd50-a405d7bfcbf6",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Chainstack",
          "url": "https://chainstack.com/security-incident-nov-2026/",
          "external_id": "cit:72b80623-e346-4b5a-b7f1-6afed4ba1cd5",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5b56c81660966f456b697a6bd8c773f1fe26e14ce6d0670850465530208f0175"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-11-02"
      }
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--4e015b12-56a9-5523-80c7-6271bfc345da",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "evt:dd5db637-d48c-42d0-b2fe-8c29f3700502",
      "name": "Development environment accessed"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--53199c61-3ad7-5abe-8bc3-fd831fe09b7c",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "evt:385a383b-58a9-4785-91e1-baf1bd7a3f5e",
      "name": "Investigation closed"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--8c922968-408d-5b02-8297-c81f84bab113",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "evt:36908e46-8731-4e15-98f0-3074688d56c5",
      "name": "Intrusion detected and access cut"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--8e3118f3-e6b8-532b-8074-3e3406d8d338",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "evt:875769d6-8dde-4dee-acd6-c237ced17766",
      "name": "Production access begins"
    }
  ]
}