{
  "type": "bundle",
  "id": "bundle--c593a943-5266-5228-8a63-58a76fd24eda",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--297545b2-aa48-5b82-828e-a15f8b49e7e5",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "org:b93a99c2-12fd-5377-a69d-ab76a51327d3",
      "name": "Mailchimp",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--82b8a7e0-630b-51d6-80a4-2de422ba6db4",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "inc:45850351-d22a-5425-8dcc-089b8b0c832e",
      "name": "Mailchimp security incident"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--bce3ea72-0a5f-54df-8faf-45290cf6aa65",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "brh:4c44c2a0-2fc4-525e-bd95-064ba5278c19",
      "name": "Mailchimp security incident"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--c5b282ef-292c-5678-8587-3b9e35eef1cb",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "clm:c6a2e105-5c6e-5034-b175-e00416266a5f",
      "relationship_type": "affected-organization",
      "source_ref": "incident--82b8a7e0-630b-51d6-80a4-2de422ba6db4",
      "target_ref": "identity--297545b2-aa48-5b82-828e-a15f8b49e7e5",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Mailchimp",
          "url": "https://mailchimp.com/newsroom/march-2022-security-incident/",
          "external_id": "cit:9bbf1816-a8e3-55f1-9d3f-697ae82cb4c0",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:52fdab1ebc4d5e1ddbc0f49a8a0afa247fcb511cf056d7c0d20c944135f2aa74"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--15affe35-d880-5c8a-8de1-0552a709376b",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:0cab63b7-b9a7-5ae1-a8d4-6040c9463340",
      "confidence": 83,
      "external_references": [
        {
          "source_name": "Mailchimp",
          "url": "https://mailchimp.com/newsroom/march-2022-security-incident/",
          "external_id": "cit:63ac3e0f-91ff-5ed5-9701-760aa8b7565e",
          "description": "A bad actor used social engineering to compromise a Mailchimp employee account and gain access to an internal tool used to assist customers.",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:cd29c0333ab80b5ac9e9a0e7c84c103b1fd0ab61567b10f46eb292e7308b0b10"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Social engineering of internal support tool (0ktapus-adjacent)."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--3dd3e2ea-ded3-5147-8466-e6e9b20b02c8",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "clm:8d6345bb-fac5-5a4b-bbc1-81b89e7580c3",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Mailchimp",
          "url": "https://mailchimp.com/newsroom/march-2022-security-incident/",
          "external_id": "cit:df099799-063b-51cb-9337-fb69bbee4a5a",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:52fdab1ebc4d5e1ddbc0f49a8a0afa247fcb511cf056d7c0d20c944135f2aa74"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The reviewed source documents the mailchimp security incident involving Mailchimp."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--64373043-0883-5cbc-8aec-c85b5857635d",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:81a79077-7d15-57a4-bf73-01422a06edd6",
      "confidence": 88,
      "external_references": [
        {
          "source_name": "Mailchimp",
          "url": "https://mailchimp.com/newsroom/march-2022-security-incident/",
          "external_id": "cit:8e0022b5-f8a1-5cad-912f-098a9ac2db65",
          "description": "Our findings show that this was a targeted incident focused on users in industries related to cryptocurrency and finance.",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:cd29c0333ab80b5ac9e9a0e7c84c103b1fd0ab61567b10f46eb292e7308b0b10"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Used to target crypto customers' mailing lists."
      }
    }
  ]
}
