{
  "type": "bundle",
  "id": "bundle--26a984d5-e54d-5763-8471-51bac76e2804",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--4bea7c13-1cf0-5bf0-87ab-d498329137af",
      "created": "2026-11-09T14:14:58.230658+00:00",
      "modified": "2026-11-09T14:14:58.230658+00:00",
      "x_ally_original_id": "org:617d975b-9574-4700-9d04-d94de576e5ca",
      "name": "The Kyiv Independent",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--d1bf78a9-1bc5-574b-8cd8-c5af1bdc9457",
      "created": "2026-11-09T14:14:58.230658+00:00",
      "modified": "2026-11-09T14:14:58.230658+00:00",
      "x_ally_original_id": "inc:e037524f-44af-4e7c-8246-70cb33caf1a6",
      "name": "Kyiv Independent website and newsletter compromise"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--d4629539-ac7d-5ab7-8a24-dfbc3953ce29",
      "created": "2026-11-09T14:14:58.230658+00:00",
      "modified": "2026-11-09T14:14:58.230658+00:00",
      "x_ally_original_id": "brh:7042e5e4-edd1-4c68-bfab-0aa019242472",
      "name": "Kyiv Independent website and newsletter compromise"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--586d03f4-a312-599c-825b-66787d7a2371",
      "created": "2026-11-09T14:14:58.230658+00:00",
      "modified": "2026-11-09T14:14:58.230658+00:00",
      "x_ally_original_id": "clm:4587be13-87a5-4852-a56e-5971300a0a45",
      "relationship_type": "affected-organization",
      "source_ref": "incident--d1bf78a9-1bc5-574b-8cd8-c5af1bdc9457",
      "target_ref": "identity--4bea7c13-1cf0-5bf0-87ab-d498329137af",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "The Kyiv Independent",
          "url": "https://kyivindependent.com/kyiv-independent-hit-by-suspected-russian-cyberattack/",
          "external_id": "cit:695eba77-9bbc-4d49-97c4-19cc1fc2fb45",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e6d696522a600aebee729c8406ec7cc1c7c555e8ee2f99798ea23cac41e82354"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--ab6684ec-c475-59cc-81e2-96e6ed917861",
      "created": "2026-11-09T14:14:58.230658+00:00",
      "modified": "2026-11-09T14:14:58.230658+00:00",
      "x_ally_original_id": "clm:abcf5a62-cdfa-46e9-989e-dc4e1c5b0739",
      "relationship_type": "resulted-in",
      "source_ref": "incident--d1bf78a9-1bc5-574b-8cd8-c5af1bdc9457",
      "target_ref": "x-ally-event--828adfba-da13-5e42-875c-f334fc56141b",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "The Kyiv Independent",
          "url": "https://kyivindependent.com/kyiv-independent-hit-by-suspected-russian-cyberattack/",
          "external_id": "cit:917e0bb8-1030-45c2-bf47-c304cac92767",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e6d696522a600aebee729c8406ec7cc1c7c555e8ee2f99798ea23cac41e82354"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--228e9b0f-5300-5e84-8d0b-984d1788e1bb",
      "created": "2026-11-09T14:14:58.230658+00:00",
      "modified": "2026-11-09T14:14:58.230658+00:00",
      "x_ally_original_id": "clm:77dc0ee5-72d7-4ad2-a9a0-e30cefe511c7",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "The Kyiv Independent",
          "url": "https://kyivindependent.com/kyiv-independent-hit-by-suspected-russian-cyberattack/",
          "external_id": "cit:eac80754-8f64-4af1-ade2-1a08de3c37ee",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e6d696522a600aebee729c8406ec7cc1c7c555e8ee2f99798ea23cac41e82354"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-11-04"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--4096441d-3809-5687-8be9-4252f7fcb7e5",
      "created": "2026-11-09T14:14:58.230658+00:00",
      "modified": "2026-11-09T14:14:58.230658+00:00",
      "x_ally_original_id": "clm:6e627683-b98f-416a-b6e7-fb9ccf0593ef",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "The Kyiv Independent",
          "url": "https://kyivindependent.com/kyiv-independent-hit-by-suspected-russian-cyberattack/",
          "external_id": "cit:6d242b72-4c90-4492-8ea6-05dc7cc45c7c",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e6d696522a600aebee729c8406ec7cc1c7c555e8ee2f99798ea23cac41e82354"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The Kyiv Independent reported that attackers accessed its content-management system and a newsletter-distribution service on November 4, 2026, disrupting its website."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--485508b8-8766-5c8b-86c8-6ad7a39ff1dc",
      "created": "2026-11-09T14:14:58.230658+00:00",
      "modified": "2026-11-09T14:14:58.230658+00:00",
      "x_ally_original_id": "clm:e7e26e3e-463d-4af4-b38f-25cbbe7d5666",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "The Kyiv Independent",
          "url": "https://kyivindependent.com/kyiv-independent-hit-by-suspected-russian-cyberattack/",
          "external_id": "cit:d4659790-6cf0-4ca5-8a69-98de90fcf68a",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e6d696522a600aebee729c8406ec7cc1c7c555e8ee2f99798ea23cac41e82354"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Attackers sent four emails containing fabricated claims in Russian and English and posted similar messages on the website; staff immediately deleted the website messages."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--83d421c2-50b7-5381-8034-db2635bc0272",
      "created": "2026-11-09T14:14:58.230658+00:00",
      "modified": "2026-11-09T14:14:58.230658+00:00",
      "x_ally_original_id": "clm:53ff0fbb-3b91-46d1-80a0-b1daef75b8f3",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "The Kyiv Independent",
          "url": "https://kyivindependent.com/kyiv-independent-hit-by-suspected-russian-cyberattack/",
          "external_id": "cit:d14fef63-3311-4458-b070-aefafbdb6390",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e6d696522a600aebee729c8406ec7cc1c7c555e8ee2f99798ea23cac41e82354"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-11-04"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--8f9c94cc-327a-527b-888b-90ab5bb7b0b2",
      "created": "2026-11-09T14:14:58.230658+00:00",
      "modified": "2026-11-09T14:14:58.230658+00:00",
      "x_ally_original_id": "clm:5fc49db1-c1c5-47fa-825c-ecde654037b2",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "The Kyiv Independent",
          "url": "https://kyivindependent.com/kyiv-independent-hit-by-suspected-russian-cyberattack/",
          "external_id": "cit:a875f5c5-7cdc-4f56-ab3c-711f64a764b5",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e6d696522a600aebee729c8406ec7cc1c7c555e8ee2f99798ea23cac41e82354"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The Kyiv Independent suspected a Russian operation based on the message content. Its notice did not provide technical attribution or establish a connection to the separate air-raid-alert application attack."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--a1e0d50a-c777-57bd-81ae-2da41db7559a",
      "created": "2026-11-09T14:14:58.230658+00:00",
      "modified": "2026-11-09T14:14:58.230658+00:00",
      "x_ally_original_id": "clm:22d0228f-3f79-49b0-9458-965a8196f0f8",
      "confidence": 100,
      "external_references": [],
      "x_ally_claim_object": {
        "kind": "iri",
        "value": "https://attack.mitre.org/techniques/T1491/002/"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--a7cafaa4-f7a7-56bf-8b2f-e5b059585599",
      "created": "2026-11-09T14:14:58.230658+00:00",
      "modified": "2026-11-09T14:14:58.230658+00:00",
      "x_ally_original_id": "clm:fb739fe4-c9d1-4988-885c-ef963a5aab88",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "The Kyiv Independent",
          "url": "https://kyivindependent.com/kyiv-independent-hit-by-suspected-russian-cyberattack/",
          "external_id": "cit:09159456-56bc-488f-9f4f-a72517e569ca",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e6d696522a600aebee729c8406ec7cc1c7c555e8ee2f99798ea23cac41e82354"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The publication said member and donor banking details were not at risk because separate third-party payment systems handled that information. No affected-reader count was disclosed."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--cb7e1d93-0b68-584d-8c07-dff75d636a2a",
      "created": "2026-11-09T14:14:58.230658+00:00",
      "modified": "2026-11-09T14:14:58.230658+00:00",
      "x_ally_original_id": "clm:2851ec43-273d-49c0-be0f-e7967cc6abcf",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "The Kyiv Independent",
          "url": "https://kyivindependent.com/kyiv-independent-hit-by-suspected-russian-cyberattack/",
          "external_id": "cit:d37671df-e5ec-4206-b0e7-ebb05f676baf",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e6d696522a600aebee729c8406ec7cc1c7c555e8ee2f99798ea23cac41e82354"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-11-04"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--da90a165-b50d-5e40-8d3e-1dea068d6407",
      "created": "2026-11-09T14:14:58.230658+00:00",
      "modified": "2026-11-09T14:14:58.230658+00:00",
      "x_ally_original_id": "clm:1bc2f06a-f84e-4786-bccd-d79a86076ca9",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "The Kyiv Independent",
          "url": "https://kyivindependent.com/kyiv-independent-hit-by-suspected-russian-cyberattack/",
          "external_id": "cit:734d8b02-4d68-4786-8771-9601cd91a12b",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e6d696522a600aebee729c8406ec7cc1c7c555e8ee2f99798ea23cac41e82354"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The newsroom worked with cybersecurity specialists to stop the attack, identify vulnerabilities and protect its platforms."
      }
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--828adfba-da13-5e42-875c-f334fc56141b",
      "created": "2026-11-09T14:14:58.230658+00:00",
      "modified": "2026-11-09T14:14:58.230658+00:00",
      "x_ally_original_id": "evt:2266014f-ce50-4760-8aca-63a36192113a",
      "name": "Website and newsletter compromise disclosed"
    }
  ]
}