{
  "type": "bundle",
  "id": "bundle--6bbeb79f-f1ce-5507-8a39-721b1ae23013",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--ae196cfa-6d02-56c1-8285-5abdbd4fb77f",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "org:54f097a2-b17d-43ef-8434-b3b88f56b26a",
      "name": "Dutch Institute for Vulnerability Disclosure",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--68b45cd0-ee6f-5cdb-84f0-25f7c4ee332d",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "brh:ca7d0298-353d-43f7-a564-b2cbb8962f60",
      "name": "DIVD Zammad volunteer-data breach"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--6accf7ec-2f3b-5e65-8daf-460e160df330",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "inc:230c34f4-639c-4998-8a18-117bb74c4247",
      "name": "DIVD Zammad volunteer-data breach"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--0777a08e-67d8-5b3c-85fd-28aefe0d7fc7",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:99f9269a-6128-4dc2-ba17-90209c7aac99",
      "relationship_type": "affected-organization",
      "source_ref": "incident--6accf7ec-2f3b-5e65-8daf-460e160df330",
      "target_ref": "identity--ae196cfa-6d02-56c1-8285-5abdbd4fb77f",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Dutch Institute for Vulnerability Disclosure",
          "url": "https://csirt.divd.nl/cases/DIVD-2026-00014/",
          "external_id": "cit:767e9179-ea1f-47ed-b9dd-d67906636f89",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:7c231340caaa277b8f32318c59792e20d479bf66c85774f544679e0bb86c2176"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--377cca38-9a87-5e8c-88a6-b70ea51b3950",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:816619ce-f7a8-441a-8781-4d5a30d4de19",
      "relationship_type": "exposed-data-category",
      "source_ref": "incident--6accf7ec-2f3b-5e65-8daf-460e160df330",
      "target_ref": "x-ally-data-category--c79f34f3-405d-57d2-8409-98eff3898231",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Dutch Institute for Vulnerability Disclosure",
          "url": "https://csirt.divd.nl/cases/DIVD-2026-00014/",
          "external_id": "cit:583ead87-3b5f-4297-90a6-83c911a4a30b",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:7c231340caaa277b8f32318c59792e20d479bf66c85774f544679e0bb86c2176"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--6468b43d-7ded-5c56-85a8-4ad88529d332",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:4c3ee5e5-8f55-4e0e-be61-5133f45414e2",
      "relationship_type": "resulted-in",
      "source_ref": "incident--6accf7ec-2f3b-5e65-8daf-460e160df330",
      "target_ref": "x-ally-event--3809c5a9-9123-5b36-8d9a-9f9537ffc4c8",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Dutch Institute for Vulnerability Disclosure",
          "url": "https://csirt.divd.nl/cases/DIVD-2026-00014/",
          "external_id": "cit:1b0bf6d0-00e0-4230-89e4-b9ab18a72cf7",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:7c231340caaa277b8f32318c59792e20d479bf66c85774f544679e0bb86c2176"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--ade243ba-4ba5-59d7-8c86-fc20a55e0f10",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:11b08c91-34eb-44b9-81e8-c3da1431c88f",
      "relationship_type": "used-product",
      "source_ref": "incident--6accf7ec-2f3b-5e65-8daf-460e160df330",
      "target_ref": "software--3497d2ef-b651-514e-8a6a-635aa44f5095",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Dutch Institute for Vulnerability Disclosure",
          "url": "https://csirt.divd.nl/cases/DIVD-2026-00014/",
          "external_id": "cit:8ac948ca-76fe-4023-bec0-5d3873af72e8",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:7c231340caaa277b8f32318c59792e20d479bf66c85774f544679e0bb86c2176"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--af0648bd-9efc-5ddd-86c1-d47fec9793dd",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:73301c92-95e6-478a-88e3-a209008226e6",
      "relationship_type": "exploited-vulnerability",
      "source_ref": "incident--6accf7ec-2f3b-5e65-8daf-460e160df330",
      "target_ref": "vulnerability--6d504e98-442a-5b7f-86d1-1ca25854f15b",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Dutch Institute for Vulnerability Disclosure",
          "url": "https://csirt.divd.nl/cases/DIVD-2026-00014/",
          "external_id": "cit:ea3d5f3e-8439-440d-b8d3-52d17fbdee48",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:7c231340caaa277b8f32318c59792e20d479bf66c85774f544679e0bb86c2176"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--e0407165-fb11-5235-8cf6-f3a9b782894e",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:d0376f45-ae3c-49d4-beaa-55920491fdd1",
      "relationship_type": "exploited-vulnerability",
      "source_ref": "incident--6accf7ec-2f3b-5e65-8daf-460e160df330",
      "target_ref": "vulnerability--78754efd-0613-56db-8b7f-9c605c7592d0",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Dutch Institute for Vulnerability Disclosure",
          "url": "https://csirt.divd.nl/cases/DIVD-2026-00014/",
          "external_id": "cit:20aaec06-a4c6-4dd5-858e-f821d230a5a1",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:7c231340caaa277b8f32318c59792e20d479bf66c85774f544679e0bb86c2176"
        }
      ]
    },
    {
      "type": "software",
      "spec_version": "2.1",
      "id": "software--3497d2ef-b651-514e-8a6a-635aa44f5095",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "prd:b7ada452-997b-4f46-b461-a492e483f110",
      "name": "Zammad"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--6d504e98-442a-5b7f-86d1-1ca25854f15b",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "vul:766f5287-3e63-4657-b197-f9c391f93dba",
      "name": "CVE-2026-102489"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--78754efd-0613-56db-8b7f-9c605c7592d0",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "vul:5564f6d5-07ed-45df-8e55-09325bcc5e72",
      "name": "CVE-2026-102490"
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--1fb3f865-e9d8-5117-82dd-abfd653a37ed",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:00ca4645-13fe-415e-8d0f-87bcb42ce21e",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Dutch Institute for Vulnerability Disclosure",
          "url": "https://csirt.divd.nl/cases/DIVD-2026-00014/",
          "external_id": "cit:1342230e-5990-42df-8a86-74ab06fda6a5",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:7c231340caaa277b8f32318c59792e20d479bf66c85774f544679e0bb86c2176"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "DIVD identified two Zammad zero-days enabling session hijacking, code execution and privilege escalation."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--4d2ff084-9809-59db-886d-63e84c3aff79",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:1a9b4367-63b1-43cb-af49-43b0be7fc68e",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Dutch Institute for Vulnerability Disclosure",
          "url": "https://csirt.divd.nl/cases/DIVD-2026-00014/",
          "external_id": "cit:1e8411f2-cf9e-4e85-98f8-c80143298edf",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:7c231340caaa277b8f32318c59792e20d479bf66c85774f544679e0bb86c2176"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-09-22"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--56dcad47-5008-59de-8204-db2abe2a28a8",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:cb9c23b4-27ae-47c4-8c8c-9489fd5c1589",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Dutch Institute for Vulnerability Disclosure",
          "url": "https://csirt.divd.nl/cases/DIVD-2026-00014/",
          "external_id": "cit:e97925af-eef5-4c18-99f4-e1c77d00faae",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:7c231340caaa277b8f32318c59792e20d479bf66c85774f544679e0bb86c2176"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-09-21"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--875a42ea-9c52-5e6d-80f9-d5a00037c981",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:e1e0f4fa-52cb-46ef-954d-263870729907",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Dutch Institute for Vulnerability Disclosure",
          "url": "https://csirt.divd.nl/cases/DIVD-2026-00014/",
          "external_id": "cit:dc34acde-93d1-468b-a68f-a9b0294e153c",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:7c231340caaa277b8f32318c59792e20d479bf66c85774f544679e0bb86c2176"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Exposed information included volunteer email addresses; additional contact details remained under investigation."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--877d0c79-7be0-5907-8bc4-bd42cdcce9e6",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:5dbbb8ff-aa74-40ae-8e2b-b78609bf9328",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Dutch Institute for Vulnerability Disclosure",
          "url": "https://csirt.divd.nl/cases/DIVD-2026-00014/",
          "external_id": "cit:90c2f2d0-30ee-4e9a-83b6-061421b0a349",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:7c231340caaa277b8f32318c59792e20d479bf66c85774f544679e0bb86c2176"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "DIVD blocked datacenter access, began external forensic work and notified Dutch authorities."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--a3a1f3b2-c7d0-5e3a-8b97-707937c40260",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:beea6b0b-b127-4865-8737-b144301b3fe8",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Dutch Institute for Vulnerability Disclosure",
          "url": "https://csirt.divd.nl/cases/DIVD-2026-00014/",
          "external_id": "cit:475a45fa-af5d-4ea1-85b1-fb1212a54a4e",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:7c231340caaa277b8f32318c59792e20d479bf66c85774f544679e0bb86c2176"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-09-24"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--dc685d65-e1e9-5979-87fd-036fba1f4e03",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:5a439ee8-0b2e-4d4b-8249-07a519ecc389",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Dutch Institute for Vulnerability Disclosure",
          "url": "https://csirt.divd.nl/cases/DIVD-2026-00014/",
          "external_id": "cit:610e08e3-7606-4ed6-bc28-9c709067f78d",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:7c231340caaa277b8f32318c59792e20d479bf66c85774f544679e0bb86c2176"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-01"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--fcbd59c3-d024-5818-8b70-e7235fdf816e",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:166e0fa7-8e66-4184-b818-a5baa0d6cdc0",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Dutch Institute for Vulnerability Disclosure",
          "url": "https://csirt.divd.nl/cases/DIVD-2026-00014/",
          "external_id": "cit:9791dae7-2034-40a8-b7a9-cf4ed121da5e",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:7c231340caaa277b8f32318c59792e20d479bf66c85774f544679e0bb86c2176"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "DIVD disclosed a compromise of its infrastructure and later confirmed volunteer data theft."
      }
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--c79f34f3-405d-57d2-8409-98eff3898231",
      "created": "2026-08-08T23:12:00Z",
      "modified": "2026-08-08T23:12:00Z",
      "x_ally_original_id": "dat:5abcee7e-4a37-494a-b6ba-87ff46149be9",
      "name": "Contact information"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--3809c5a9-9123-5b36-8d9a-9f9537ffc4c8",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "evt:0624e5c7-4938-4b01-8ea4-a66788f778d8",
      "name": "Data theft confirmed"
    }
  ]
}