{
  "type": "bundle",
  "id": "bundle--17a4c342-a1a9-554d-8426-d60c935ed7d7",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--2972b002-2b66-555e-869a-0cabdb7e0925",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "org:805e55b9-2b46-5099-b1be-2ba6e53b6003",
      "name": "Medibank",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--0be92b64-84b0-5d16-8c19-2b1c6811c75e",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "brh:e81f77ee-1d65-52f6-93a4-02d7d9db2d07",
      "name": "Medibank security incident"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--43baa6f4-52dd-5f9a-8e7a-61803852daa8",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "inc:c5844841-4d8c-5536-b4af-c4e5a0f3aa9d",
      "name": "Medibank security incident"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--38750d16-2f5e-597f-89d7-c0aac893caf5",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "clm:753ed22a-22bd-5d50-b7bf-b94400eeba82",
      "relationship_type": "affected-organization",
      "source_ref": "incident--43baa6f4-52dd-5f9a-8e7a-61803852daa8",
      "target_ref": "identity--2972b002-2b66-555e-869a-0cabdb7e0925",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Medibank",
          "url": "https://www.medibank.com.au/livebetter/newsroom/post/updating-our-customers-about-the-cybercrime",
          "external_id": "cit:7134b3b8-e948-56ca-9a94-aecda6ab936f",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:75659df71547184605ddad6c7968ae791fab44f78baae57330f7f53d6c60c001"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--40fda2d0-7bee-50b9-8ad1-daa453827ccd",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:8bece5d1-2750-5746-bc22-d15db1a50f05",
      "confidence": 84,
      "external_references": [
        {
          "source_name": "Medibank",
          "url": "https://www.medibank.com.au/livebetter/newsroom/post/updating-our-customers-about-the-cybercrime",
          "external_id": "cit:48bda35c-c440-5d7e-b2d3-8067dac8a4f1",
          "description": "Our forensic investigation is still underway and will determine which of this data has been stolen.",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:0f5cc87eed29fafea927c2510ca3956cbcecddf63939941523a6ea7bc2347e88"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Stolen/reused credentials, no MFA."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--a7eec452-c076-52e7-8873-e7872789f7bb",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "clm:78f4a918-3323-5033-ae7e-8977cbd55a71",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Medibank",
          "url": "https://www.medibank.com.au/livebetter/newsroom/post/updating-our-customers-about-the-cybercrime",
          "external_id": "cit:649ab7a5-6faf-5667-ab25-52284f52dccf",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:75659df71547184605ddad6c7968ae791fab44f78baae57330f7f53d6c60c001"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The reviewed source documents the medibank security incident involving Medibank."
      }
    }
  ]
}