{
  "type": "bundle",
  "id": "bundle--d8df2736-5ce2-58db-82db-775b4e117d7f",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--6f3392b4-10f2-57d0-838f-40ce54610b74",
      "created": "2026-08-09T06:46:31Z",
      "modified": "2026-08-09T06:46:31Z",
      "x_ally_original_id": "org:0f77ab6e-df7a-453c-b010-191bdbde6eaf",
      "name": "CTT – Correios de Portugal, S.A.",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--8b199f14-a6a2-5c9c-8821-285fd5699b4c",
      "created": "2026-08-09T06:46:31Z",
      "modified": "2026-08-09T06:46:31Z",
      "x_ally_original_id": "brh:557debb9-fc53-4a0b-bab6-d83a2d56414f",
      "name": "CTT Locky customer-data breach"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--a5c91200-e3ca-577d-83f9-af436a1c1a00",
      "created": "2026-08-09T06:46:31Z",
      "modified": "2026-08-09T06:46:31Z",
      "x_ally_original_id": "inc:ec8c1ce1-537a-49c9-846d-969d30049bd4",
      "name": "April 2026 CTT Locky data breach"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--0785956e-ea11-5128-8d58-e50cbbbc00df",
      "created": "2026-08-09T06:46:31Z",
      "modified": "2026-08-09T06:46:31Z",
      "x_ally_original_id": "clm:e2d8763e-79ed-4c81-a1b7-02b1aa2c1a19",
      "relationship_type": "used-product",
      "source_ref": "incident--a5c91200-e3ca-577d-83f9-af436a1c1a00",
      "target_ref": "software--841d0938-0551-541d-8517-860e9631154a",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Renascença",
          "url": "https://rr.pt/noticia/economia/2026/04/27/ctt-confirma-roubo-de-dados-de-clientes/468636/",
          "external_id": "cit:bd540404-af77-48ef-87b7-4852c75f6a2d",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:483d30c2e4207994ef4db64b7358f652ac3a9ada90dc2ca52994a6dffb5eba13"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--1c17a250-921c-5435-8792-f496d3ebc5b1",
      "created": "2026-08-09T06:46:31Z",
      "modified": "2026-08-09T06:46:31Z",
      "x_ally_original_id": "clm:82f16c26-dc1b-43a2-9ef5-32f6e8ef9d38",
      "relationship_type": "resulted-in",
      "source_ref": "incident--a5c91200-e3ca-577d-83f9-af436a1c1a00",
      "target_ref": "x-ally-notification--e302ae64-4022-56cf-8b05-7348e568cf2a",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Renascença",
          "url": "https://rr.pt/noticia/economia/2026/04/27/ctt-confirma-roubo-de-dados-de-clientes/468636/",
          "external_id": "cit:94b1823c-13ca-4c27-a71c-d4831056cd89",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:483d30c2e4207994ef4db64b7358f652ac3a9ada90dc2ca52994a6dffb5eba13"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--5fc590a3-2411-51bc-871d-36cb0340ca6c",
      "created": "2026-08-09T06:46:31Z",
      "modified": "2026-08-09T06:46:31Z",
      "x_ally_original_id": "clm:a713ee29-028f-4ab1-9b77-86a38b092c4f",
      "relationship_type": "resulted-in",
      "source_ref": "incident--a5c91200-e3ca-577d-83f9-af436a1c1a00",
      "target_ref": "x-ally-data-exposure--5712714b-a68f-5370-8bce-f321a3de0902",
      "confidence": 95,
      "external_references": [
        {
          "source_name": "Renascença",
          "url": "https://rr.pt/noticia/economia/2026/04/27/ctt-confirma-roubo-de-dados-de-clientes/468636/",
          "external_id": "cit:f4b37184-8a40-4da6-a3b3-8c56d79a4fa4",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:483d30c2e4207994ef4db64b7358f652ac3a9ada90dc2ca52994a6dffb5eba13"
        },
        {
          "source_name": "Have I Been Pwned",
          "url": "https://haveibeenpwned.com/api/v3/breach/CTT",
          "external_id": "cit:87d0994a-c6e5-4a35-aeaa-c4e304aca703",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:22cfc30066b305a7a51723b1ddc22c6e9dc9e09b87993d8c449d0b5eda206be8"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--68ea20e8-0c6b-5bd9-8bd7-2830f42745cf",
      "created": "2026-08-09T06:46:31Z",
      "modified": "2026-08-09T06:46:31Z",
      "x_ally_original_id": "clm:ad98363d-0648-4f37-9d6c-71410339e10d",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--5712714b-a68f-5370-8bce-f321a3de0902",
      "target_ref": "x-ally-data-category--c79f34f3-405d-57d2-8409-98eff3898231",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Have I Been Pwned",
          "url": "https://haveibeenpwned.com/api/v3/breach/CTT",
          "external_id": "cit:76807aa9-c6be-4188-a7a3-8ebe675e3e47",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:22cfc30066b305a7a51723b1ddc22c6e9dc9e09b87993d8c449d0b5eda206be8"
        },
        {
          "source_name": "Renascença",
          "url": "https://rr.pt/noticia/economia/2026/04/27/ctt-confirma-roubo-de-dados-de-clientes/468636/",
          "external_id": "cit:e8a44cc1-8754-4d5d-bc64-14244ed5e605",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:483d30c2e4207994ef4db64b7358f652ac3a9ada90dc2ca52994a6dffb5eba13"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--94e45a7f-bea3-5e7a-8cce-feb2fb8f5522",
      "created": "2026-08-09T06:46:31Z",
      "modified": "2026-08-09T06:46:31Z",
      "x_ally_original_id": "clm:8360c14f-5d96-465d-afb5-248caebf3705",
      "relationship_type": "affected-organization",
      "source_ref": "incident--a5c91200-e3ca-577d-83f9-af436a1c1a00",
      "target_ref": "identity--6f3392b4-10f2-57d0-838f-40ce54610b74",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Renascença",
          "url": "https://rr.pt/noticia/economia/2026/04/27/ctt-confirma-roubo-de-dados-de-clientes/468636/",
          "external_id": "cit:3b7e9ffc-d001-4d30-8fc2-4251772e8ba6",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:483d30c2e4207994ef4db64b7358f652ac3a9ada90dc2ca52994a6dffb5eba13"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--d6007d24-108c-554e-8ac2-b56e58ab7621",
      "created": "2026-08-09T06:46:31Z",
      "modified": "2026-08-09T06:46:31Z",
      "x_ally_original_id": "clm:f29fcfef-a3e3-4224-9c16-6ef2c5838e66",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--5712714b-a68f-5370-8bce-f321a3de0902",
      "target_ref": "x-ally-data-category--a2b7dd9d-0c02-5710-88ed-ea507d0ffa07",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Have I Been Pwned",
          "url": "https://haveibeenpwned.com/api/v3/breach/CTT",
          "external_id": "cit:28bc86d5-1a7d-4e73-b451-097dbdb375dd",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:22cfc30066b305a7a51723b1ddc22c6e9dc9e09b87993d8c449d0b5eda206be8"
        }
      ]
    },
    {
      "type": "software",
      "spec_version": "2.1",
      "id": "software--841d0938-0551-541d-8517-860e9631154a",
      "created": "2026-08-09T06:46:31Z",
      "modified": "2026-08-09T06:46:31Z",
      "x_ally_original_id": "prd:0948ebe6-f61f-46b1-8b5a-7fae9abb1917",
      "name": "Locky smart-locker network"
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--26b6edc9-4020-57fe-8c14-a4c39b048dad",
      "created": "2026-08-09T06:46:31Z",
      "modified": "2026-08-09T06:46:31Z",
      "x_ally_original_id": "clm:f933f1ad-c740-40d7-aa13-81831fc8b8b6",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Renascença",
          "url": "https://rr.pt/noticia/economia/2026/04/27/ctt-confirma-roubo-de-dados-de-clientes/468636/",
          "external_id": "cit:34873c8e-ebaf-45a9-b6a4-24129ccaca86",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:483d30c2e4207994ef4db64b7358f652ac3a9ada90dc2ca52994a6dffb5eba13"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "CTT said affected customers would be contacted through official channels for clarification and individualized support."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--3ee3c183-ac1f-5c92-8375-d19e2eb99de4",
      "created": "2026-08-09T06:46:31Z",
      "modified": "2026-08-09T06:46:31Z",
      "x_ally_original_id": "clm:088e9611-56da-4595-961d-d842a245431e",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Have I Been Pwned",
          "url": "https://haveibeenpwned.com/api/v3/breach/CTT",
          "external_id": "cit:a80e4208-a54a-4f6d-a42c-b653caab1a29",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:22cfc30066b305a7a51723b1ddc22c6e9dc9e09b87993d8c449d0b5eda206be8"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "integer",
        "value": 468124,
        "unit": "record"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--55863bab-245d-5d76-8688-5c941cc514fc",
      "created": "2026-08-09T06:46:31Z",
      "modified": "2026-08-09T06:46:31Z",
      "x_ally_original_id": "clm:a0298d72-221c-4bcd-aefc-cbe35989914d",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Renascença",
          "url": "https://rr.pt/noticia/economia/2026/04/27/ctt-confirma-roubo-de-dados-de-clientes/468636/",
          "external_id": "cit:3fef7139-78aa-4369-88b0-51bb4e6cf13e",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:483d30c2e4207994ef4db64b7358f652ac3a9ada90dc2ca52994a6dffb5eba13"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "CTT said Portugal's National Cybersecurity Centre had been notified."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--acc7d123-285e-56d2-868e-598f44f34242",
      "created": "2026-08-09T06:46:31Z",
      "modified": "2026-08-09T06:46:31Z",
      "x_ally_original_id": "clm:64256c77-6e44-480a-9c9e-59f922f2067b",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Renascença",
          "url": "https://rr.pt/noticia/economia/2026/04/27/ctt-confirma-roubo-de-dados-de-clientes/468636/",
          "external_id": "cit:bc8a320b-43a5-44ad-b890-c06e7bdc19ff",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:483d30c2e4207994ef4db64b7358f652ac3a9ada90dc2ca52994a6dffb5eba13"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "CTT said the exposed data did not include full addresses, passwords, or financial data."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--b8f145e3-1c10-5cbd-8d22-a091c4379963",
      "created": "2026-08-09T06:46:31Z",
      "modified": "2026-08-09T06:46:31Z",
      "x_ally_original_id": "clm:88d542a6-d03d-434d-9012-d2bc8f14f262",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Renascença",
          "url": "https://rr.pt/noticia/economia/2026/04/27/ctt-confirma-roubo-de-dados-de-clientes/468636/",
          "external_id": "cit:edec6da1-819c-4b3b-8c97-cf16e79d96d1",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:483d30c2e4207994ef4db64b7358f652ac3a9ada90dc2ca52994a6dffb5eba13"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-04-27"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--bdf0233c-dc15-5128-8c3c-840bb43aac32",
      "created": "2026-08-09T06:46:31Z",
      "modified": "2026-08-09T06:46:31Z",
      "x_ally_original_id": "clm:561878e6-2255-45c3-a886-b54e04420ed5",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Renascença",
          "url": "https://rr.pt/noticia/economia/2026/04/27/ctt-confirma-roubo-de-dados-de-clientes/468636/",
          "external_id": "cit:05a52cfe-ef80-405e-aa96-5929872f5bc0",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:483d30c2e4207994ef4db64b7358f652ac3a9ada90dc2ca52994a6dffb5eba13"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "CTT described an external exposure of data associated with the Locky locker network and said the related security incident had been contained."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--f6ced53a-9add-5104-81a7-1c25e947b266",
      "created": "2026-08-09T06:46:31Z",
      "modified": "2026-08-09T06:46:31Z",
      "x_ally_original_id": "clm:e068a910-5235-4845-921f-8a9bcccec95c",
      "confidence": 80,
      "external_references": [
        {
          "source_name": "Have I Been Pwned",
          "url": "https://haveibeenpwned.com/api/v3/breach/CTT",
          "external_id": "cit:802f7b8f-9c79-43f4-ac4d-cb8bf426e319",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:22cfc30066b305a7a51723b1ddc22c6e9dc9e09b87993d8c449d0b5eda206be8"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-04-26"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--fd73c8a9-a970-5301-8553-d80392c67868",
      "created": "2026-08-09T06:46:31Z",
      "modified": "2026-08-09T06:46:31Z",
      "x_ally_original_id": "clm:bf054061-14f8-4f7c-b88a-71eba1bef7df",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Renascença",
          "url": "https://rr.pt/noticia/economia/2026/04/27/ctt-confirma-roubo-de-dados-de-clientes/468636/",
          "external_id": "cit:2bfb011e-4901-47e9-9d0a-0e62fc96e46b",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:483d30c2e4207994ef4db64b7358f652ac3a9ada90dc2ca52994a6dffb5eba13"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "CTT said the Locky system was not compromised and remained operational."
      }
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--a2b7dd9d-0c02-5710-88ed-ea507d0ffa07",
      "created": "2026-08-08T23:12:00Z",
      "modified": "2026-08-08T23:12:00Z",
      "x_ally_original_id": "dat:559cf3f5-80c7-45ba-a930-ff0bfa8d17b0",
      "name": "Names"
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--c79f34f3-405d-57d2-8409-98eff3898231",
      "created": "2026-08-08T23:12:00Z",
      "modified": "2026-08-08T23:12:00Z",
      "x_ally_original_id": "dat:5abcee7e-4a37-494a-b6ba-87ff46149be9",
      "name": "Contact information"
    },
    {
      "type": "x-ally-data-exposure",
      "spec_version": "2.1",
      "id": "x-ally-data-exposure--5712714b-a68f-5370-8bce-f321a3de0902",
      "created": "2026-08-09T06:46:31Z",
      "modified": "2026-08-09T06:46:31Z",
      "x_ally_original_id": "exp:9ad99650-03dd-47fa-b8d1-85b7274ba2d2",
      "name": "CTT Locky delivery-notification contact-data corpus"
    },
    {
      "type": "x-ally-notification",
      "spec_version": "2.1",
      "id": "x-ally-notification--e302ae64-4022-56cf-8b05-7348e568cf2a",
      "created": "2026-08-09T06:46:31Z",
      "modified": "2026-08-09T06:46:31Z",
      "x_ally_original_id": "ntf:c9efbbb8-0fed-4c10-a55a-d5abca244c8a",
      "name": "CTT incident notifications"
    }
  ]
}