{
  "type": "bundle",
  "id": "bundle--2bdcce94-51f9-52f1-8323-0f7951a0ea6b",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--3e8b6348-a4a4-5220-8412-05d09ee768b7",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "org:20c1b08f-2921-4e78-8478-763f50c433b5",
      "name": "Helpfeel",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--1e756b1b-84f0-58a4-860a-f19685b61217",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "brh:72ad95bd-5f51-435b-8ba2-323cdb0a4032",
      "name": "Gyazo account and image-metadata breach"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--a3979231-6880-5c80-8ddd-674ec48b52bf",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "inc:12d15e82-47a2-42ad-a919-c10f1a508926",
      "name": "Gyazo account and image-metadata breach"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--5f0c3e46-688d-5c81-86d9-304f980b2b47",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "clm:a11a7d83-c34f-40b4-bf67-d479344919fc",
      "relationship_type": "resulted-in",
      "source_ref": "incident--a3979231-6880-5c80-8ddd-674ec48b52bf",
      "target_ref": "x-ally-event--9a2b77b4-59fc-55bf-8628-432a769ccdde",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Helpfeel",
          "url": "https://corp.helpfeel.com/en/news/news-20261021-2",
          "external_id": "cit:5c270afb-de5d-4f15-b006-811aaf5c14a0",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:0f81603c6224f6d1ff40ae8c2cc3dc55f60da8f9ac11e130fbec3d2fb77330f2"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--80fad3c8-5c93-5759-8497-762b3924076c",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "clm:ce49af43-a4fd-4db8-9ed7-9af4ab188e18",
      "relationship_type": "affected-organization",
      "source_ref": "incident--a3979231-6880-5c80-8ddd-674ec48b52bf",
      "target_ref": "identity--3e8b6348-a4a4-5220-8412-05d09ee768b7",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Helpfeel",
          "url": "https://corp.helpfeel.com/en/news/news-20261021-2",
          "external_id": "cit:471508a3-8166-4d3c-a497-5cac641930fa",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:0f81603c6224f6d1ff40ae8c2cc3dc55f60da8f9ac11e130fbec3d2fb77330f2"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--abcfcd91-ad15-5fb3-889f-c6b86f38f3a4",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "clm:8bfd1b50-fbfb-49c2-83fc-cccf61b4c4b0",
      "relationship_type": "resulted-in",
      "source_ref": "incident--a3979231-6880-5c80-8ddd-674ec48b52bf",
      "target_ref": "x-ally-event--faa4b1c4-7fc8-53fa-830e-4ca8a837385b",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Helpfeel",
          "url": "https://corp.helpfeel.com/en/news/news-20261021-2",
          "external_id": "cit:bdcb67f4-b5d0-47a3-a474-b30dc764e29b",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:0f81603c6224f6d1ff40ae8c2cc3dc55f60da8f9ac11e130fbec3d2fb77330f2"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--c1169695-0ad8-5f0c-8103-252871e8942f",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "clm:257d5750-3ea0-4532-ac51-068a8f83c922",
      "relationship_type": "resulted-in",
      "source_ref": "incident--a3979231-6880-5c80-8ddd-674ec48b52bf",
      "target_ref": "x-ally-event--ce70229d-873d-5b34-842b-89cf6d2190db",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Helpfeel",
          "url": "https://corp.helpfeel.com/en/news/news-20261021-2",
          "external_id": "cit:88506003-c645-409d-b852-5def1ddf15a3",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:0f81603c6224f6d1ff40ae8c2cc3dc55f60da8f9ac11e130fbec3d2fb77330f2"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--cacd29e6-0cef-53ba-8b94-e1a70098bc15",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "clm:215c6feb-511e-46ad-b06e-ee14990e8177",
      "relationship_type": "resulted-in",
      "source_ref": "incident--a3979231-6880-5c80-8ddd-674ec48b52bf",
      "target_ref": "x-ally-event--79df563a-d47c-51df-8431-7ae9516a9562",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Helpfeel",
          "url": "https://corp.helpfeel.com/en/news/news-20261021-2",
          "external_id": "cit:650c366f-e2c3-4f73-800c-b28086b21ab4",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:0f81603c6224f6d1ff40ae8c2cc3dc55f60da8f9ac11e130fbec3d2fb77330f2"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--0f98c246-1c09-5397-8d59-e5465f4fc2dd",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "clm:2657c496-5eba-418f-a8ce-db9abe46d877",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Helpfeel",
          "url": "https://corp.helpfeel.com/en/news/news-20261021-2",
          "external_id": "cit:6bebe805-57f2-4bfb-9388-eb146ab04e46",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:0f81603c6224f6d1ff40ae8c2cc3dc55f60da8f9ac11e130fbec3d2fb77330f2"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The November 5 correction associates deleted-image metadata with about 1.12 million accounts, including about 57,000 closed or canceled accounts. It also dates the filtered metadata mainly to two-day periods starting January 1, 2016 and January 1, 2020 UTC."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--101b5101-d29a-5883-826c-850605a9e13a",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "clm:2f6c42ef-b589-4343-a3f7-e2132ccd54c8",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Helpfeel",
          "url": "https://corp.helpfeel.com/en/news/news-20261021-2",
          "external_id": "cit:d1dfdf25-f6fd-4b6e-88a8-123f0fec3a0f",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:0f81603c6224f6d1ff40ae8c2cc3dc55f60da8f9ac11e130fbec3d2fb77330f2"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-09-27"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--16f0692f-f3e4-54ea-8ea0-89e0099d6c8a",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "clm:140931a8-ad0e-444e-bf9c-edd8ba7e22eb",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Helpfeel",
          "url": "https://corp.helpfeel.com/en/news/news-20261021-2",
          "external_id": "cit:04e69913-a2d9-4377-996a-689d0b1f006a",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:0f81603c6224f6d1ff40ae8c2cc3dc55f60da8f9ac11e130fbec3d2fb77330f2"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The report identifies about 23.62 million account records, not people; about 490 million image-metadata records; 2.4 million filtered metadata records; and 174 million deleted-image metadata records."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--28cd131d-73e4-503c-83de-891a17c82411",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "clm:5893f781-294f-4e9f-ac41-94a034e986dc",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Helpfeel",
          "url": "https://corp.helpfeel.com/en/news/news-20261021-2",
          "external_id": "cit:10d6f8da-b8e8-46cf-8a0e-371d87031741",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:0f81603c6224f6d1ff40ae8c2cc3dc55f60da8f9ac11e130fbec3d2fb77330f2"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The flaw was in Helpfeel’s own content-conversion code, rather than an external software supplier."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--3caa8796-b1e6-577f-8e7c-ddfbd2fdde88",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "clm:e67eb9d0-8437-4ce1-9e20-bce3c22a5a7c",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Helpfeel",
          "url": "https://corp.helpfeel.com/en/news/news-20261021-2",
          "external_id": "cit:e8f43eba-e7d3-42df-a3c9-9967b505fc82",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:0f81603c6224f6d1ff40ae8c2cc3dc55f60da8f9ac11e130fbec3d2fb77330f2"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-11-05"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--5f1ea006-af17-55a0-806e-1e8a6b6e030d",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "clm:dd7c69fe-3686-417c-ab6d-9cf9c29637b8",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Helpfeel",
          "url": "https://corp.helpfeel.com/en/news/news-20261021-2",
          "external_id": "cit:c6d23df6-d8e9-4555-a329-15e06b204e7e",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:0f81603c6224f6d1ff40ae8c2cc3dc55f60da8f9ac11e130fbec3d2fb77330f2"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Helpfeel blocked the access route and fixed the flaw September 12; Gyazo resumed September 27 after additional safeguards. Individual notices and data-retention changes followed."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--89e2ead7-d8b3-54ab-84bd-b86c78c17387",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "clm:8857b365-3393-4409-bf6c-c121a872629c",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Helpfeel",
          "url": "https://corp.helpfeel.com/en/news/news-20261021-2",
          "external_id": "cit:4e6643f4-2057-4f6b-8a99-cc6ab4edc0f2",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:0f81603c6224f6d1ff40ae8c2cc3dc55f60da8f9ac11e130fbec3d2fb77330f2"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Helpfeel reported that a Gyazo upload-server vulnerability enabled arbitrary commands and database access on September 11–12, 2026."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--90fff05c-d1a5-5ac9-8458-262721ba2da6",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "clm:fdf33f95-9041-4dee-8f4b-e6224e3ac085",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Helpfeel",
          "url": "https://corp.helpfeel.com/en/news/news-20261021-2",
          "external_id": "cit:d84fa807-c3cf-45f2-b281-000ee22ce37d",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:0f81603c6224f6d1ff40ae8c2cc3dc55f60da8f9ac11e130fbec3d2fb77330f2"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-09-11"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--9ac5c624-4838-5ab0-8886-8d3df5d49ce3",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "clm:a80dfcd3-1db3-4dd7-ab92-278f0249c72b",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Helpfeel",
          "url": "https://corp.helpfeel.com/en/news/news-20261021-2",
          "external_id": "cit:c437811a-30ba-4bf0-8349-20625cc928ef",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:0f81603c6224f6d1ff40ae8c2cc3dc55f60da8f9ac11e130fbec3d2fb77330f2"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Helpfeel confirmed 432 image files belonging to 133 users were viewed or obtained. It found no evidence of bulk image-file acquisition."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--ab58b077-60bb-5e8f-8b8a-4e04af1a1cfb",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "clm:9c90bae8-4d16-44e2-ba6b-a5f98ff22be7",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Helpfeel",
          "url": "https://corp.helpfeel.com/en/news/news-20261021-2",
          "external_id": "cit:3cbb5d24-c9d2-4940-95b5-331016eee592",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:0f81603c6224f6d1ff40ae8c2cc3dc55f60da8f9ac11e130fbec3d2fb77330f2"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-09-11"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--c8360057-735e-5990-855e-6549cfd10eba",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "clm:a9651055-d3d6-4d9b-b43e-dadea71bd6a2",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Helpfeel",
          "url": "https://corp.helpfeel.com/en/news/news-20261021-2",
          "external_id": "cit:d11528be-0e9e-471e-9d0e-0d6f296a6dd5",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:0f81603c6224f6d1ff40ae8c2cc3dc55f60da8f9ac11e130fbec3d2fb77330f2"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-09-16"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--e4ba1684-c995-542b-8027-0f9c729a3878",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "clm:7aca2fe4-932a-40c3-90b5-5708a60021d8",
      "confidence": 100,
      "external_references": [],
      "x_ally_claim_object": {
        "kind": "iri",
        "value": "https://attack.mitre.org/techniques/T1190/"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--f94ced4c-23e9-5954-8256-40cc0f430cad",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "clm:425eb818-061a-4a91-84af-0322d2188321",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Helpfeel",
          "url": "https://corp.helpfeel.com/en/news/news-20261021-2",
          "external_id": "cit:3a650415-7fe8-4e84-bcde-59b174f90c4f",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:0f81603c6224f6d1ff40ae8c2cc3dc55f60da8f9ac11e130fbec3d2fb77330f2"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-09-12"
      }
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--79df563a-d47c-51df-8431-7ae9516a9562",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "evt:8147382c-c6ba-4517-b70a-141ca59a1577",
      "name": "Account-scope correction published"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--9a2b77b4-59fc-55bf-8628-432a769ccdde",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "evt:103c70c8-d507-43be-a1ff-3d1c42f1d357",
      "name": "Intrusion detected"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--ce70229d-873d-5b34-842b-89cf6d2190db",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "evt:10ccedbc-156a-4156-85de-f85237c8481a",
      "name": "Access blocked and flaw fixed"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--faa4b1c4-7fc8-53fa-830e-4ca8a837385b",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "evt:691cb3e5-595a-4162-9100-235f8445e22f",
      "name": "Gyazo service resumed"
    }
  ]
}