{
  "type": "bundle",
  "id": "bundle--6bccc726-2b83-5fc0-88c8-16399425d9d7",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--ce7c46dc-5ecd-58f3-8226-30591cbfe675",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "org:7893b33f-18d2-5a2c-8469-6be879e0ef1a",
      "name": "Media Markt",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--5c8aed08-ebca-5113-89d9-da55b030e482",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "inc:556c99ac-1a3b-5020-b977-4740069ef417",
      "name": "Media Markt security incident"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--5f6306a1-019d-5105-8fba-248d1d8604e4",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "brh:c456f045-3b14-5763-84d8-66dc30ef087a",
      "name": "Media Markt security incident"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--d680cb0f-09f8-5b69-89e0-60bd2c6aadd2",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "clm:ffeb67b0-27aa-56e5-9df2-e4e20522e335",
      "relationship_type": "affected-organization",
      "source_ref": "incident--5c8aed08-ebca-5113-89d9-da55b030e482",
      "target_ref": "identity--ce7c46dc-5ecd-58f3-8226-30591cbfe675",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Heise",
          "url": "https://www.heise.de/news/Ransomware-Angriff-auf-Mediamarkt-und-Saturn-6260388.html",
          "external_id": "cit:21fa824c-e137-5cb3-aeee-e34a81bc99f3",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:d9aa3f68a9a89ebeec0101c39b6dfcf1e67a075a823ba4da01aa538519c51703"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--3d421ac7-92ac-56f7-88dc-6024a26d1fa4",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "clm:8bcc0d40-164b-5b1d-bfe1-90695233846c",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Heise",
          "url": "https://www.heise.de/news/Ransomware-Angriff-auf-Mediamarkt-und-Saturn-6260388.html",
          "external_id": "cit:3b656cb5-4deb-55a9-b000-18607735edc3",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:d9aa3f68a9a89ebeec0101c39b6dfcf1e67a075a823ba4da01aa538519c51703"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The reviewed source documents the media markt security incident involving Media Markt."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--5598aa38-3606-5fff-8684-1b7138311a36",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:7a035a6c-beee-5d8e-bd2f-75d035646e4a",
      "confidence": 95,
      "external_references": [
        {
          "source_name": "Heise",
          "url": "https://www.heise.de/news/Ransomware-Angriff-auf-Mediamarkt-und-Saturn-6260388.html",
          "external_id": "cit:c28873fd-c855-52ce-a919-e4735a2c039e",
          "description": "Für den Angriff auf MediaMarktSaturn sei die Ransomware Hive benutzt worden.",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:9bd4927fd3db4d7fd76e850e94852ffe219da3e6eef6760c7082d53bb2a18048"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Hive ransomware."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--5e8b8953-0c8f-54a8-8137-303799681063",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:fdb76384-6e84-5341-aae6-d5fab34d9fef",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Heise",
          "url": "https://www.heise.de/news/Ransomware-Angriff-auf-Mediamarkt-und-Saturn-6260388.html",
          "external_id": "cit:c6c8093f-69f9-5836-adc4-72327035706b",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:9bd4927fd3db4d7fd76e850e94852ffe219da3e6eef6760c7082d53bb2a18048"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2021-11-08"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--f1ec6c52-3353-513a-89ac-15b0ec6b4f5f",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:655c25d7-0d44-51b5-b43e-1e4fe1d7dab2",
      "confidence": 90,
      "external_references": [],
      "x_ally_claim_object": {
        "kind": "iri",
        "value": "https://attack.mitre.org/techniques/T1486/"
      }
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--22c11581-a0d0-5953-862c-8f4f86abee24",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "evt:248e4d51-6aa6-5885-93af-47796c3aa44d",
      "name": "Documented public update"
    }
  ]
}