{
  "type": "bundle",
  "id": "bundle--47abedac-1d13-5bf1-845a-4dd1168710a5",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--44509a06-690a-500a-8b67-89e33d1e125c",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "org:30bdf0b5-8059-52b8-ba63-c91263327f9c",
      "name": "Dior",
      "identity_class": "organization"
    },
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--4ee74555-e3f6-546e-806c-6e96b347d59b",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "org:c8df1313-c75e-5a81-bda5-f809631e6f14",
      "name": "Chanel",
      "identity_class": "organization"
    },
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--65129096-b64a-5762-8131-b843128804fd",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "org:f4b81bd2-f009-57ee-9198-1033e0fc7863",
      "name": "Louis Vuitton",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--42ade4ae-bf42-5127-8ab6-5b05c705a5b5",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "inc:22510ea0-9974-5bdb-b343-0136f76876e0",
      "name": "LVMH brands customer-data incidents"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--96a42391-f760-5fbf-8200-200865a82aaa",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "brh:85b4d5c9-4dfc-5b03-b825-a2dc4c0c7c03",
      "name": "LVMH brands customer-data incidents"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--2dad0333-405a-5cc1-87d1-40154dad1d6e",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "clm:644195c7-4aeb-5a54-8378-c6bc094898e4",
      "relationship_type": "affected-organization",
      "source_ref": "incident--42ade4ae-bf42-5127-8ab6-5b05c705a5b5",
      "target_ref": "identity--4ee74555-e3f6-546e-806c-6e96b347d59b",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "IBM",
          "url": "https://www.ibm.com/new/product-blog/beyond-perimeter-defense-lessons-from-the-recent-salesforce-instance-compromises",
          "external_id": "cit:5d891535-81b6-5554-825b-778a77c2e970",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:bab575802ed14092e746377cd27896c677f29dd8c6770f1f2728134106f16f33"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--b4ddf94c-cf4c-572b-8c6d-430d5309df83",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "clm:c171f32e-0e89-504e-9165-fa2a8ae7e86e",
      "relationship_type": "affected-organization",
      "source_ref": "incident--42ade4ae-bf42-5127-8ab6-5b05c705a5b5",
      "target_ref": "identity--44509a06-690a-500a-8b67-89e33d1e125c",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "IBM",
          "url": "https://www.ibm.com/new/product-blog/beyond-perimeter-defense-lessons-from-the-recent-salesforce-instance-compromises",
          "external_id": "cit:17990233-de12-58cf-bd0f-51a32dbee750",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:bab575802ed14092e746377cd27896c677f29dd8c6770f1f2728134106f16f33"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--fd40391c-0219-5444-8816-4794238ca63b",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "clm:a5acdf4f-bee8-5455-9a2a-2154b39fa4e7",
      "relationship_type": "affected-organization",
      "source_ref": "incident--42ade4ae-bf42-5127-8ab6-5b05c705a5b5",
      "target_ref": "identity--65129096-b64a-5762-8131-b843128804fd",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Hong Kong Privacy Commissioner for Personal Data",
          "url": "https://www.pcpd.org.hk/tc_chi/news_events/media_enquiry/enquiry_20250719.html",
          "external_id": "cit:461bfe41-b78e-5b75-925c-681ecfab92d5",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:f7542c9ab45da946c8bbfee642ee24f59118907cd915264320d077a4973ac70a"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--552f77b1-607c-56ba-834b-9e2ebeadb72c",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:b10695d2-7377-5217-8815-747ce178fde6",
      "confidence": 88,
      "external_references": [
        {
          "source_name": "IBM",
          "url": "https://www.ibm.com/new/product-blog/beyond-perimeter-defense-lessons-from-the-recent-salesforce-instance-compromises",
          "external_id": "cit:8e25b3a8-0006-56f7-a7bd-147ae5f9b8ea",
          "description": "They persuaded high-privilege users to install malicious applications or authorize fraudulent connected apps, often rebranded as legitimate tools such as My Ticket Portal, a replica of Salesforce Data Loader.",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:bab575802ed14092e746377cd27896c677f29dd8c6770f1f2728134106f16f33"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Voice phishing induced personnel to authorize a malicious connected OAuth application in Salesforce."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--a0a297f9-1e61-50ba-8823-be9f4f74ab03",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:0f94bd43-0aad-5e9c-a8f3-16ccaddc4045",
      "confidence": 90,
      "external_references": [],
      "x_ally_claim_object": {
        "kind": "iri",
        "value": "https://attack.mitre.org/techniques/T1528/"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--c75836c6-ac6f-53c0-8257-a103389af0d6",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "clm:0b569738-e71d-55ab-b136-0a881c535dff",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "IBM",
          "url": "https://www.ibm.com/new/product-blog/beyond-perimeter-defense-lessons-from-the-recent-salesforce-instance-compromises",
          "external_id": "cit:610d0f80-112f-5357-8670-850ab942ff87",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:bab575802ed14092e746377cd27896c677f29dd8c6770f1f2728134106f16f33"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The reviewed source documents the lvmh brands customer-data incidents involving Louis Vuitton, Dior, Chanel."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--d017e86b-b387-5a42-8760-da3dafc28be5",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:15fe7484-0ab8-51d5-a55b-1264f3fb81bd",
      "confidence": 86,
      "external_references": [
        {
          "source_name": "IBM",
          "url": "https://www.ibm.com/new/product-blog/beyond-perimeter-defense-lessons-from-the-recent-salesforce-instance-compromises",
          "external_id": "cit:d7d8405a-c294-5ad1-aac2-7633e313163c",
          "description": "Confirmed victims include Google, Allianz Life, LVMH brands (Louis Vuitton, Dior, Tiffany & Co.), Adidas, Qantas, Chanel and Farmers Insurance.",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:bab575802ed14092e746377cd27896c677f29dd8c6770f1f2728134106f16f33"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Customer data exposed across multiple LVMH brands."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--f068bfe5-9db3-54aa-8c51-b47456dbeef6",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:6eb245b7-a3c5-5229-ab5f-b5c39b8342f1",
      "confidence": 90,
      "external_references": [],
      "x_ally_claim_object": {
        "kind": "iri",
        "value": "https://attack.mitre.org/techniques/T1566/"
      }
    }
  ]
}