{
  "type": "bundle",
  "id": "bundle--7ea3311f-28c4-598b-8ec5-4801689ac011",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--74d87e4a-9fdf-59e0-8f25-39121a14ce77",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "org:c8fbe2fc-0560-47fb-a310-49ed5a45119d",
      "name": "Cypress.io",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--aa057ad4-1201-57d2-8185-c00086d1e822",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "brh:5a517890-276e-486a-80e0-eaa8632502f7",
      "name": "Cypress Metabase Cloud data breach"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--cfe12381-53bc-5799-871a-fbfae8e25bb6",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "inc:a7deb1c5-c9a8-4c47-9d30-c58f1b93ff75",
      "name": "Cypress Metabase Cloud data breach"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--566b6d57-1b0a-5c39-84b0-a86f49ac063d",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:5e9d47fc-793e-4480-be10-9107e10734eb",
      "relationship_type": "exposed-data-category",
      "source_ref": "incident--cfe12381-53bc-5799-871a-fbfae8e25bb6",
      "target_ref": "x-ally-data-category--05e2e501-a627-5fd9-8973-d3d458231f93",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Cypress.io",
          "url": "https://www.cypress.io/blog/cypress-security-incident-status-and-response",
          "external_id": "cit:f0d46af5-9d48-4a49-a3b2-5c5b9b1c11d8",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:4ae7a1ebd2193dbdd1adb768cb63744d0d4a9ee0e358eff0839f9628bc58faf9"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--89cdccce-13aa-5911-8ab4-8ea347a0fc91",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:3e5d0fa1-184f-470f-99f6-5ccde55c6420",
      "relationship_type": "affected-organization",
      "source_ref": "incident--cfe12381-53bc-5799-871a-fbfae8e25bb6",
      "target_ref": "identity--74d87e4a-9fdf-59e0-8f25-39121a14ce77",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Cypress.io",
          "url": "https://www.cypress.io/blog/cypress-security-incident-status-and-response",
          "external_id": "cit:4a662649-c87c-43a9-bd4b-d6fe6a3b5ae7",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:4ae7a1ebd2193dbdd1adb768cb63744d0d4a9ee0e358eff0839f9628bc58faf9"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--d24e3b20-c1d9-532b-8685-b7a69207e622",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:1d1e1c8c-ed4d-4247-8c41-ce3410109bc0",
      "relationship_type": "used-product",
      "source_ref": "incident--cfe12381-53bc-5799-871a-fbfae8e25bb6",
      "target_ref": "software--f5aaa094-f5d4-5cf0-8c66-18bf59f84ff7",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Cypress.io",
          "url": "https://www.cypress.io/blog/cypress-security-incident-status-and-response",
          "external_id": "cit:e3463f5d-971d-4e9a-a58e-874b3a552449",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:4ae7a1ebd2193dbdd1adb768cb63744d0d4a9ee0e358eff0839f9628bc58faf9"
        }
      ]
    },
    {
      "type": "software",
      "spec_version": "2.1",
      "id": "software--f5aaa094-f5d4-5cf0-8c66-18bf59f84ff7",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "prd:696e4661-bed7-4d3f-b5a6-9e2e31ab15a1",
      "name": "Metabase"
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--25b7b447-04c5-5039-82be-76946d92367c",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:81236566-cb52-40e3-8a32-14bbd69e6153",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Cypress.io",
          "url": "https://www.cypress.io/blog/cypress-security-incident-status-and-response",
          "external_id": "cit:930909a0-ffff-470e-914d-7b804b686966",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:4ae7a1ebd2193dbdd1adb768cb63744d0d4a9ee0e358eff0839f9628bc58faf9"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Cypress attributed access to a previously unknown Metabase vulnerability."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--29bce60c-6d12-5c41-8496-bd633bffce5d",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:5797aff2-4267-454a-aa77-5d2a591a220f",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Cypress.io",
          "url": "https://www.cypress.io/blog/cypress-security-incident-status-and-response",
          "external_id": "cit:d62cd27b-372d-4b94-8a30-90923985461c",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:4ae7a1ebd2193dbdd1adb768cb63744d0d4a9ee0e358eff0839f9628bc58faf9"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Cypress said test execution and results were unaffected."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--53cb3d02-293f-53ea-86ea-650fb974c15d",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:e1bb605d-e345-4952-9738-241e7591497a",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Cypress.io",
          "url": "https://www.cypress.io/blog/cypress-security-incident-status-and-response",
          "external_id": "cit:558375e1-355f-4afe-81f0-71f9bbdaa529",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:4ae7a1ebd2193dbdd1adb768cb63744d0d4a9ee0e358eff0839f9628bc58faf9"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-07-31"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--66e54c91-04f5-56ed-8ebe-2c463bbc1b62",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:0d41cbc9-19a0-4b46-9e33-93cc85e57402",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Cypress.io",
          "url": "https://www.cypress.io/blog/cypress-security-incident-status-and-response",
          "external_id": "cit:cf989212-3af3-4ac3-889a-2f929941db39",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:4ae7a1ebd2193dbdd1adb768cb63744d0d4a9ee0e358eff0839f9628bc58faf9"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Cypress reported unauthorized queries against its Metabase Cloud instance."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--6c3fc719-4344-580c-897a-4ed79bd117b9",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:9cf29866-8975-482a-8fe9-c24d11559423",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Cypress.io",
          "url": "https://www.cypress.io/blog/cypress-security-incident-status-and-response",
          "external_id": "cit:c420e9cf-ccc0-4296-bdaf-4e80e14670d1",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:4ae7a1ebd2193dbdd1adb768cb63744d0d4a9ee0e358eff0839f9628bc58faf9"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Cypress rotated credentials, revoked sign-in authorizations and commissioned independent forensic review."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--8b9afc30-b6e1-5c6a-8b7c-d322fccdc051",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:be6f9b04-557f-4ff2-863d-1d09995c01ab",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Metabase",
          "url": "https://www.metabase.com/blog/vulnerability-what-happened",
          "external_id": "cit:51591686-4f3a-4659-85b3-ff57606f9e2f",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5feae022782947c7035dee5be1a22bd8000645eac1155b7b5df2be7253ba4865"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Metabase described SQL injection that created administrative sessions."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--8fd5c88b-2732-5bc8-8afc-0c00d50a9cf8",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:e52ddb7f-24af-4280-bdc5-e2cc8cdbe452",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Metabase",
          "url": "https://www.metabase.com/blog/security-update-6-aug-2026",
          "external_id": "cit:fb3e5feb-ddf2-4006-966b-ef26aed5c1ff",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:2694989cac418b22aa4484d43e9f4bb99c7f0099cd6fd2d35c1486c1cc2d38bc"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Metabase patched Cloud instances and released fixes on August 6."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--b57db1d3-6442-53e0-8d02-51fbe6ad66de",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:3a69a261-cc34-454b-a226-10d0850a04b9",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Cypress.io",
          "url": "https://www.cypress.io/blog/cypress-security-incident-status-and-response",
          "external_id": "cit:1fc6a755-2777-4e22-bce9-b120ab508aa0",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:4ae7a1ebd2193dbdd1adb768cb63744d0d4a9ee0e358eff0839f9628bc58faf9"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-08-06"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--e039db50-233f-57d6-8f0c-9f3c814888e5",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:fee5e118-bf41-4775-8649-0f73de489136",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Cypress.io",
          "url": "https://www.cypress.io/blog/cypress-security-incident-status-and-response",
          "external_id": "cit:1b251b8b-85c8-4e96-bcec-404d8c11dd8e",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:4ae7a1ebd2193dbdd1adb768cb63744d0d4a9ee0e358eff0839f9628bc58faf9"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Accessible information included account data, build metadata and, for some customers, tokens and recorded test content."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--f8be9df1-03b2-557b-8c05-a726f0f6d40c",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:e49364c9-d4e9-4597-b590-5233ff92106a",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Cypress.io",
          "url": "https://www.cypress.io/blog/cypress-security-incident-status-and-response",
          "external_id": "cit:14de3d3e-f760-4880-8711-8d2637cd4e10",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:4ae7a1ebd2193dbdd1adb768cb63744d0d4a9ee0e358eff0839f9628bc58faf9"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-08-07"
      }
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--05e2e501-a627-5fd9-8973-d3d458231f93",
      "created": "2026-08-09T01:12:00Z",
      "modified": "2026-08-09T01:12:00Z",
      "x_ally_original_id": "dat:7290ba39-bdce-4ff7-8087-56e370cd91c5",
      "name": "Account credentials"
    }
  ]
}