{
  "type": "bundle",
  "id": "bundle--627af963-d8ab-54ad-8051-645457dd9811",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--3624e8a4-4da4-5a42-8a2e-c2c23843e5b1",
      "created": "2026-10-29T14:10:49.959371+00:00",
      "modified": "2026-10-29T14:10:49.959371+00:00",
      "x_ally_original_id": "org:066147ee-fd23-407a-b4dd-4498ec379148",
      "name": "Government of Moldova",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--90b64a58-74a4-593e-8c61-8510ca286c67",
      "created": "2026-10-29T14:10:49.959371+00:00",
      "modified": "2026-10-29T14:10:49.959371+00:00",
      "x_ally_original_id": "brh:cce5dc42-b267-462e-90ff-f14718691ace",
      "name": "Moldova government digital-services data extraction"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--b865a408-4bf8-56ab-8d6c-4a69ae085c36",
      "created": "2026-10-29T14:10:49.959371+00:00",
      "modified": "2026-10-29T14:10:49.959371+00:00",
      "x_ally_original_id": "inc:298ed50a-304d-4543-8f81-54306d213e1f",
      "name": "Moldova government digital-services data extraction"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--3395abbf-9958-5460-852e-45868e9f630e",
      "created": "2026-10-29T14:10:49.959371+00:00",
      "modified": "2026-10-29T14:10:49.959371+00:00",
      "x_ally_original_id": "clm:8c2a6ef5-07fb-4c8c-b62d-e631bcf21f20",
      "relationship_type": "resulted-in",
      "source_ref": "incident--b865a408-4bf8-56ab-8d6c-4a69ae085c36",
      "target_ref": "x-ally-event--9efe28dc-6e34-515e-8479-70220ba99591",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Agenția de Guvernare Electronică",
          "url": "https://egov.md/ro/node/41145",
          "external_id": "cit:8867d94d-6c99-4aa5-9b2b-d6e96da75894",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:b95a398955e307d48c16106a9573e78b8f72b259c1746074816a0c65fe12134d"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--54d69813-c877-5b7e-8185-6fa011f2f76a",
      "created": "2026-10-29T14:10:49.959371+00:00",
      "modified": "2026-10-29T14:10:49.959371+00:00",
      "x_ally_original_id": "clm:9399c8ff-f882-4535-bc7c-981914cedcc6",
      "relationship_type": "resulted-in",
      "source_ref": "incident--b865a408-4bf8-56ab-8d6c-4a69ae085c36",
      "target_ref": "x-ally-event--f172acde-36cf-5603-8f81-fdec73092d64",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Agenția de Guvernare Electronică",
          "url": "https://egov.md/ro/node/41145",
          "external_id": "cit:26941950-b2b4-4af9-996c-fb7f9fabbb0e",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:b95a398955e307d48c16106a9573e78b8f72b259c1746074816a0c65fe12134d"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--d782a27c-1df3-54f0-8d25-af1d7d61dbec",
      "created": "2026-10-29T14:10:49.959371+00:00",
      "modified": "2026-10-29T14:10:49.959371+00:00",
      "x_ally_original_id": "clm:45cbcdeb-22b1-48ab-9ac8-9747890de007",
      "relationship_type": "affected-organization",
      "source_ref": "incident--b865a408-4bf8-56ab-8d6c-4a69ae085c36",
      "target_ref": "identity--3624e8a4-4da4-5a42-8a2e-c2c23843e5b1",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Agenția de Guvernare Electronică",
          "url": "https://egov.md/ro/node/41141",
          "external_id": "cit:49547ee4-7afa-4c68-a381-7aff6c1f649c",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:75b6ad3193772c292c1a1e4199e29506c7c912b271f3129ccfd9ce732c76ae9a"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--dadf5266-afbd-5259-8e25-ce686a05ee13",
      "created": "2026-10-29T14:10:49.959371+00:00",
      "modified": "2026-10-29T14:10:49.959371+00:00",
      "x_ally_original_id": "clm:678cc34a-a07f-4ac2-bb8b-ee35411c9bf2",
      "relationship_type": "resulted-in",
      "source_ref": "incident--b865a408-4bf8-56ab-8d6c-4a69ae085c36",
      "target_ref": "x-ally-event--f2536555-11b9-5724-8973-c86795472140",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Agenția de Guvernare Electronică",
          "url": "https://egov.md/ro/node/41141",
          "external_id": "cit:b1642232-6d97-4fef-8ba6-588c5b2951ab",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:75b6ad3193772c292c1a1e4199e29506c7c912b271f3129ccfd9ce732c76ae9a"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--e8ced97e-d1e1-59c5-8a5f-dc484e58560a",
      "created": "2026-10-29T14:10:49.959371+00:00",
      "modified": "2026-10-29T14:10:49.959371+00:00",
      "x_ally_original_id": "clm:50018dff-f770-42d0-a311-3f06ac2aed68",
      "relationship_type": "resulted-in",
      "source_ref": "incident--b865a408-4bf8-56ab-8d6c-4a69ae085c36",
      "target_ref": "x-ally-event--c199520f-4dcc-5b4f-8caf-28e652300bd2",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Agenția de Guvernare Electronică",
          "url": "https://egov.md/ro/node/41145",
          "external_id": "cit:5d092ad2-5773-4c17-81e8-9a9f38dbbaad",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:b95a398955e307d48c16106a9573e78b8f72b259c1746074816a0c65fe12134d"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--092d45d4-12fd-51fa-8a68-f0a58d825227",
      "created": "2026-10-29T14:10:49.959371+00:00",
      "modified": "2026-10-29T14:10:49.959371+00:00",
      "x_ally_original_id": "clm:4ccd0381-9b7c-42f9-8c8c-98deec1c18bd",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Agenția de Guvernare Electronică",
          "url": "https://egov.md/ro/node/41145",
          "external_id": "cit:c084dc1d-a0a7-41c1-8f10-607cb62aceca",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:b95a398955e307d48c16106a9573e78b8f72b259c1746074816a0c65fe12134d"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Further attempts were blocked on October 25 and October 27. Most affected services had been remediated by the October 27 notice, with restoration conditional on security retesting."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--0de4cf26-39dd-5f22-80d9-e4c6087732ab",
      "created": "2026-10-29T14:10:49.959371+00:00",
      "modified": "2026-10-29T14:10:49.959371+00:00",
      "x_ally_original_id": "clm:5154f49d-3fde-4d04-8dfe-424fac32a415",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Agenția de Guvernare Electronică",
          "url": "https://egov.md/ro/node/41141",
          "external_id": "cit:095c904d-4f39-4675-a7ea-b708630727e7",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:75b6ad3193772c292c1a1e4199e29506c7c912b271f3129ccfd9ce732c76ae9a"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-24"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--10cf0b6f-0722-5e46-8769-1a5c0178a3a1",
      "created": "2026-10-29T14:10:49.959371+00:00",
      "modified": "2026-10-29T14:10:49.959371+00:00",
      "x_ally_original_id": "clm:07b8ca45-e044-4148-aa8f-fee27459beb1",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Agenția de Guvernare Electronică",
          "url": "https://egov.md/ro/node/41145",
          "external_id": "cit:d0785765-02f5-4e59-ba5c-686a8db58450",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:b95a398955e307d48c16106a9573e78b8f72b259c1746074816a0c65fe12134d"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "AGE preliminarily estimated that approximately one million IDNP identifiers were queried and datasets associated with approximately 750,000 IDNPs were extracted during October 19–23. These are distinct queried and extracted populations; the investigation remained ongoing."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--3dd0fb7a-b9d1-53d8-8553-b2c9f940b734",
      "created": "2026-10-29T14:10:49.959371+00:00",
      "modified": "2026-10-29T14:10:49.959371+00:00",
      "x_ally_original_id": "clm:903ad6d7-2990-45d1-bc2d-8a43b7ef93e3",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Agenția de Guvernare Electronică",
          "url": "https://egov.md/ro/node/41145",
          "external_id": "cit:53106458-a5c1-45b4-86e8-2f71ec492aed",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:b95a398955e307d48c16106a9573e78b8f72b259c1746074816a0c65fe12134d"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "AGE said bank-card information was not affected and investigators had not identified unauthorized changes to state-register data."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--44dc789a-8c45-5b21-868d-f9ed31050710",
      "created": "2026-10-29T14:10:49.959371+00:00",
      "modified": "2026-10-29T14:10:49.959371+00:00",
      "x_ally_original_id": "clm:d80a8e71-cd64-4063-9384-2e2315192d41",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Agenția de Guvernare Electronică",
          "url": "https://egov.md/ro/node/41145",
          "external_id": "cit:34434b88-8245-461d-8597-f2b446fbcd38",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:b95a398955e307d48c16106a9573e78b8f72b259c1746074816a0c65fe12134d"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Exposed categories included identity and first-degree family information, insurance and healthcare details, social benefits, disability, driving licences, photographs, vehicles and companies, IBANs, tax debts and MPay payment history. Not every affected person had every category exposed."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--4939821e-af5a-5eba-8870-53533537e23f",
      "created": "2026-10-29T14:10:49.959371+00:00",
      "modified": "2026-10-29T14:10:49.959371+00:00",
      "x_ally_original_id": "clm:51d9e747-45c9-421b-a847-17c388584e58",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Agenția de Guvernare Electronică",
          "url": "https://egov.md/ro/node/41145",
          "external_id": "cit:97a379f3-16ad-4679-92f0-8d32c0f1cada",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:b95a398955e307d48c16106a9573e78b8f72b259c1746074816a0c65fe12134d"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Attackers exploited vulnerabilities in services accessible without authentication and used obtained data for further extraction. The notice identifies no CVE or attacker."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--672fcae8-ceb2-54d9-84ae-c0306483c39b",
      "created": "2026-10-29T14:10:49.959371+00:00",
      "modified": "2026-10-29T14:10:49.959371+00:00",
      "x_ally_original_id": "clm:a9cf45ee-0ca8-4a1b-bc9b-0b4cda55d764",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Agenția de Guvernare Electronică",
          "url": "https://egov.md/ro/node/41141",
          "external_id": "cit:ff4b57d1-a6b6-4f6e-b61a-4cbce2801052",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:75b6ad3193772c292c1a1e4199e29506c7c912b271f3129ccfd9ce732c76ae9a"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The October 24 announcement described an attack on the night of October 22 and approximately 11 million access requests against public digital services. Request counts are not affected-person counts."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--6f13832e-af03-528f-8bb1-12c340d9d1ac",
      "created": "2026-10-29T14:10:49.959371+00:00",
      "modified": "2026-10-29T14:10:49.959371+00:00",
      "x_ally_original_id": "clm:ed7e27a9-4143-48bb-bfea-834157a32ada",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Agenția de Guvernare Electronică",
          "url": "https://egov.md/ro/node/41145",
          "external_id": "cit:027cd3bd-1c7a-4c65-b913-e7af283e74d6",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:b95a398955e307d48c16106a9573e78b8f72b259c1746074816a0c65fe12134d"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-23"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--7df73c17-02b4-53a4-817c-fd8717db57d7",
      "created": "2026-10-29T14:10:49.959371+00:00",
      "modified": "2026-10-29T14:10:49.959371+00:00",
      "x_ally_original_id": "clm:5483239f-19b9-4079-9e16-2553caea93bd",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Agenția de Guvernare Electronică",
          "url": "https://egov.md/ro/node/41145",
          "external_id": "cit:58686b40-0dd3-4e30-a1f3-98ae6c3c44cc",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:b95a398955e307d48c16106a9573e78b8f72b259c1746074816a0c65fe12134d"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-19"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--a434739a-d09d-583b-8efd-b1e7f8c7bdde",
      "created": "2026-10-29T14:10:49.959371+00:00",
      "modified": "2026-10-29T14:10:49.959371+00:00",
      "x_ally_original_id": "clm:73799791-e163-4e8b-b900-c248ff122a5d",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Agenția de Guvernare Electronică",
          "url": "https://egov.md/ro/node/41145",
          "external_id": "cit:cbf1d222-01ae-4533-b5a1-a9dd4777ffa7",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:b95a398955e307d48c16106a9573e78b8f72b259c1746074816a0c65fe12134d"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-27"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--afe9df38-1e3d-5886-87b6-4a3ad5541691",
      "created": "2026-10-29T14:10:49.959371+00:00",
      "modified": "2026-10-29T14:10:49.959371+00:00",
      "x_ally_original_id": "clm:64df1556-dae3-430e-9826-157e16534d58",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Agenția de Guvernare Electronică",
          "url": "https://egov.md/ro/node/41145",
          "external_id": "cit:5dd5ed55-8b21-4b07-b582-26296cc295db",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:b95a398955e307d48c16106a9573e78b8f72b259c1746074816a0c65fe12134d"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Authorities stopped extraction at 11:30 on October 23 and preventively disconnected 82 public services and more than 30 information systems and administration panels. The notice does not specify the time zone."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--b08b5ff3-16e2-5b1e-8506-7e8af98b42f1",
      "created": "2026-10-29T14:10:49.959371+00:00",
      "modified": "2026-10-29T14:10:49.959371+00:00",
      "x_ally_original_id": "clm:c403e45e-663d-4f52-8119-b81c4f1055d7",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Agenția de Guvernare Electronică",
          "url": "https://egov.md/ro/node/41145",
          "external_id": "cit:67624062-458b-43d1-a8fe-b8670d237f27",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:b95a398955e307d48c16106a9573e78b8f72b259c1746074816a0c65fe12134d"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-19"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--caa035cc-cfaf-5667-8319-d04f1f3973c0",
      "created": "2026-10-29T14:10:49.959371+00:00",
      "modified": "2026-10-29T14:10:49.959371+00:00",
      "x_ally_original_id": "clm:d463b750-ed9b-4bd9-8b8e-2e8b18aca47d",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Agenția de Guvernare Electronică",
          "url": "https://egov.md/ro/node/41141",
          "external_id": "cit:d084fbef-930d-4944-8b61-9dddd597c92e",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:75b6ad3193772c292c1a1e4199e29506c7c912b271f3129ccfd9ce732c76ae9a"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-24"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--e034dc2d-997a-55a3-827a-60b519bb908a",
      "created": "2026-10-29T14:10:49.959371+00:00",
      "modified": "2026-10-29T14:10:49.959371+00:00",
      "x_ally_original_id": "clm:6dc59cd6-b170-4efe-bcd6-da86f4b9e977",
      "confidence": 100,
      "external_references": [],
      "x_ally_claim_object": {
        "kind": "iri",
        "value": "https://attack.mitre.org/techniques/T1190/"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--e50ed596-7578-52f6-833c-b355f0330354",
      "created": "2026-10-29T14:10:49.959371+00:00",
      "modified": "2026-10-29T14:10:49.959371+00:00",
      "x_ally_original_id": "clm:fd5a2869-76c3-456b-9d32-2ee4fc787150",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Agenția de Guvernare Electronică",
          "url": "https://egov.md/ro/node/41141",
          "external_id": "cit:4450a128-71ad-46a1-9288-b66ad177eec6",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:75b6ad3193772c292c1a1e4199e29506c7c912b271f3129ccfd9ce732c76ae9a"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Authorities warned that stolen identifiers could support impersonation fraud and advised citizens not to share passwords or authorization codes with unsolicited callers. Police and the data-protection authority were informed."
      }
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--9efe28dc-6e34-515e-8479-70220ba99591",
      "created": "2026-10-29T14:10:49.959371+00:00",
      "modified": "2026-10-29T14:10:49.959371+00:00",
      "x_ally_original_id": "evt:6b84d077-c444-49b3-8fd7-d22996ca7447",
      "name": "Start of revised extraction window"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--c199520f-4dcc-5b4f-8caf-28e652300bd2",
      "created": "2026-10-29T14:10:49.959371+00:00",
      "modified": "2026-10-29T14:10:49.959371+00:00",
      "x_ally_original_id": "evt:b10ddbba-cd01-46ad-9cc9-7efbdf36d648",
      "name": "Preliminary scope and technical findings published"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--f172acde-36cf-5603-8f81-fdec73092d64",
      "created": "2026-10-29T14:10:49.959371+00:00",
      "modified": "2026-10-29T14:10:49.959371+00:00",
      "x_ally_original_id": "evt:41df6a17-f8a5-4009-8d0e-fbbc8ed17b2e",
      "name": "Extraction stopped and services disconnected"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--f2536555-11b9-5724-8973-c86795472140",
      "created": "2026-10-29T14:10:49.959371+00:00",
      "modified": "2026-10-29T14:10:49.959371+00:00",
      "x_ally_original_id": "evt:3cf30e55-3814-453f-aedd-e7627bc0505d",
      "name": "Initial public warning"
    }
  ]
}