{
  "type": "bundle",
  "id": "bundle--52b5f2aa-342b-561b-8226-7834e603b33d",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--2ba9da36-083d-5a45-849c-2a9eb4da6e53",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "org:79476771-64dd-4872-889e-8686a87c084e",
      "name": "MVSEP",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--86b98919-752a-5ce1-892e-937d08766d1d",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "inc:4f6ab873-e671-4a4f-8aba-1a51dff10f56",
      "name": "MVSEP server and API-key compromise"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--92423a18-2508-590d-80de-db5487e615d0",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "brh:99e8d171-0bec-42ad-a1d8-38dc321447ed",
      "name": "MVSEP server and API-key compromise"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--02ada5bb-500f-5961-8701-8184de50f722",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "clm:33f28532-546e-46cd-83bf-2518bdaf9e26",
      "relationship_type": "resulted-in",
      "source_ref": "incident--86b98919-752a-5ce1-892e-937d08766d1d",
      "target_ref": "x-ally-event--e5349ec2-0f33-5bf7-8f12-5c535b84593a",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "MVSEP",
          "url": "https://mvsep.com/en/security-incident",
          "external_id": "cit:a6c314a9-b8db-4b18-963e-0e9f1fbe6091",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:a94b234b9f7b543bb43efd753cc5312ba2929aa1c0d8f691c2b50c804f4fa93d"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--cb2f83ff-8e3a-58ed-87a5-a3e4a889930d",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "clm:3ed34720-192b-4e7d-af61-8ac24927b6e2",
      "relationship_type": "resulted-in",
      "source_ref": "incident--86b98919-752a-5ce1-892e-937d08766d1d",
      "target_ref": "x-ally-event--b0238cf0-dae2-5b42-88df-df350accf40c",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "MVSEP",
          "url": "https://mvsep.com/en/security-incident",
          "external_id": "cit:e7f08023-7515-4dfd-a4c1-be0a4dc2b7d9",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:a94b234b9f7b543bb43efd753cc5312ba2929aa1c0d8f691c2b50c804f4fa93d"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--d2692ee7-cf02-5695-8118-79d5c9ae9371",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "clm:1acbddbf-840e-4c65-b3bb-a36d81825457",
      "relationship_type": "resulted-in",
      "source_ref": "incident--86b98919-752a-5ce1-892e-937d08766d1d",
      "target_ref": "x-ally-event--b529cba5-c988-5128-81a1-2b5126c44736",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "MVSEP",
          "url": "https://mvsep.com/en/security-incident",
          "external_id": "cit:72c6f45b-b117-48cf-b8f9-49f41c7e214d",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:a94b234b9f7b543bb43efd753cc5312ba2929aa1c0d8f691c2b50c804f4fa93d"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--e47aaba4-71ec-5e87-82c1-8270daefda22",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "clm:e93505c5-70ae-4536-bcd3-44102b644526",
      "relationship_type": "affected-organization",
      "source_ref": "incident--86b98919-752a-5ce1-892e-937d08766d1d",
      "target_ref": "identity--2ba9da36-083d-5a45-849c-2a9eb4da6e53",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "MVSEP",
          "url": "https://mvsep.com/en/security-incident",
          "external_id": "cit:499ac92e-06e2-4a52-8b5a-9c0094cc6a26",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:a94b234b9f7b543bb43efd753cc5312ba2929aa1c0d8f691c2b50c804f4fa93d"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--0a265b08-61a6-51de-80f3-a636c96ce60c",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "clm:aa6f0cb5-7450-4ed9-ac37-670f4a342b26",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "MVSEP",
          "url": "https://mvsep.com/en/security-incident",
          "external_id": "cit:0a5eb1dd-3b10-43f6-8f66-55620bef9362",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:a94b234b9f7b543bb43efd753cc5312ba2929aa1c0d8f691c2b50c804f4fa93d"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-11-03"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--291cd2e0-6059-5d18-8200-b978a6b2996c",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "clm:0e2f2d7f-eb3b-4913-aa11-4c5fd5703c7f",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "MVSEP",
          "url": "https://mvsep.com/en/security-incident",
          "external_id": "cit:4195abe0-3436-42ac-af07-bebbb2abc1f3",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:a94b234b9f7b543bb43efd753cc5312ba2929aa1c0d8f691c2b50c804f4fa93d"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The attacker obtained other servers’ login details and signed in as an administrator. A database restart caused the October 5 outage."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--2b7e30e6-4383-51da-84c2-ee80c8c03f45",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "clm:8429c6ed-c8e1-4a48-84fd-9e405341838c",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "MVSEP",
          "url": "https://mvsep.com/en/security-incident",
          "external_id": "cit:041aceec-5693-46ae-88e2-a701384592e5",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:a94b234b9f7b543bb43efd753cc5312ba2929aa1c0d8f691c2b50c804f4fa93d"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "MVSEP reported that an attacker exploited a cookie-processing flaw to run server commands during its October 4–6 incident. A copied API key was later used by a third-party audio-separation website."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--58a7e5d5-ed08-5c16-8f6e-e1429e255b63",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "clm:0a00221d-39a9-48e4-9286-1ec6a42b600d",
      "confidence": 100,
      "external_references": [],
      "x_ally_claim_object": {
        "kind": "iri",
        "value": "https://attack.mitre.org/techniques/T1190/"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--9f7399a4-0fde-5c06-87de-6066f3b66b10",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "clm:1c8d4a9f-6547-4b11-a482-87349f73711e",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "MVSEP",
          "url": "https://mvsep.com/en/security-incident",
          "external_id": "cit:3080ba23-643f-4efd-8b91-25243d1e036e",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:a94b234b9f7b543bb43efd753cc5312ba2929aa1c0d8f691c2b50c804f4fa93d"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-05"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--a1e7c762-4ce2-5056-8cf0-2edd034504d1",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "clm:ad4d0201-ecd3-41c5-be93-bb04f3e0d1cd",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "MVSEP",
          "url": "https://mvsep.com/en/security-incident",
          "external_id": "cit:4e4e6b65-86af-4189-bf80-607289356a0e",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:a94b234b9f7b543bb43efd753cc5312ba2929aa1c0d8f691c2b50c804f4fa93d"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-06"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--ec772098-e656-54d0-87b5-d99f8d3b6de8",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "clm:a6764836-e1c7-4599-8d57-05449939b119",
      "confidence": 100,
      "external_references": [],
      "x_ally_claim_object": {
        "kind": "iri",
        "value": "https://attack.mitre.org/techniques/T1078/"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--f53d2f33-ae94-5b86-8ba4-784efd918be0",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "clm:204d9f23-a2cc-4f33-a25f-4ff2880533a4",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "MVSEP",
          "url": "https://mvsep.com/en/security-incident",
          "external_id": "cit:67b2685c-5836-44a5-b75f-f6a923fe8621",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:a94b234b9f7b543bb43efd753cc5312ba2929aa1c0d8f691c2b50c804f4fa93d"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "MVSEP fixed the flaw, removed access and rotated service secrets on October 6. On November 3 it revoked the misused key and required remaining old API keys to be replaced by November 10."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--f9d69e2e-e4a9-5d19-8beb-4bfbacdcb01e",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "clm:22e2ebf5-4546-4399-b628-164165c05807",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "MVSEP",
          "url": "https://mvsep.com/en/security-incident",
          "external_id": "cit:b03f8639-2018-41ee-9d58-9373d5fbb0f7",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:a94b234b9f7b543bb43efd753cc5312ba2929aa1c0d8f691c2b50c804f4fa93d"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "MVSEP treats server-held account data, bcrypt password hashes, plaintext API keys, processing history, audio files, support messages, cloud-storage tokens and payment transaction records as exposed. Card details were not held there."
      }
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--b0238cf0-dae2-5b42-88df-df350accf40c",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "evt:abd02064-bd89-494f-b4ef-337d26b41169",
      "name": "Flaw fixed and access removed"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--b529cba5-c988-5128-81a1-2b5126c44736",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "evt:ee7a35c4-13f8-4e42-8997-cb57306698e8",
      "name": "Copied API-key misuse identified"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--e5349ec2-0f33-5bf7-8f12-5c535b84593a",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "evt:ec64e21b-8617-48df-9d54-6a482071ae81",
      "name": "Server commands executed and database restarted"
    }
  ]
}