{
  "type": "bundle",
  "id": "bundle--e26195c5-db00-579d-852a-13bedb8f2389",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--908b7e96-8ab4-5fc8-83b3-5fd19ac9eaec",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "org:cb274651-88e5-5962-bcf5-06e9b4cfffb1",
      "name": "Pandora",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--7c4bbc15-0bc8-5f30-87d9-aa645d003970",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "brh:2b76dde1-a7e0-5a2d-adb9-9e276b79aac3",
      "name": "Pandora security incident"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--e19b336b-8dff-5dc3-8338-0dfd11de14c7",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "inc:bb4758cf-1114-5c31-ba94-1e835dfa31d3",
      "name": "Pandora security incident"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--800fcb32-5d96-5c88-8630-a423f281d350",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "clm:4c2c6e8c-e691-5798-af22-02ebc4d7f155",
      "relationship_type": "affected-organization",
      "source_ref": "incident--e19b336b-8dff-5dc3-8338-0dfd11de14c7",
      "target_ref": "identity--908b7e96-8ab4-5fc8-83b3-5fd19ac9eaec",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "TechRadar",
          "url": "https://www.techradar.com/pro/security/pandora-confirms-data-breach-customer-data-stolen-heres-what-we-know",
          "external_id": "cit:cbffc819-f4a3-5abe-89ef-dca2c11f7b1b",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:992d1e473bd2fce37580e11f69cc6cf948aed7cd13698b1a5378426efc235640"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--1a02b118-00f8-5bea-8459-2483178ee4a4",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:0187ae6c-f389-5b01-9cc0-ab35f5e0d968",
      "confidence": 90,
      "external_references": [
        {
          "source_name": "TechRadar",
          "url": "https://www.techradar.com/pro/security/pandora-confirms-data-breach-customer-data-stolen-heres-what-we-know",
          "external_id": "cit:9c0d537f-72c5-5e39-bc43-757a53818b90",
          "description": "Pandora confirms data breach - customer data stolen, here's what we know",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:992d1e473bd2fce37580e11f69cc6cf948aed7cd13698b1a5378426efc235640"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Customer data exposed."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--37938a87-bb9e-5a7e-88ee-76627eea7e76",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:a6cb9b90-e1a0-517d-9f3f-1fb682d06961",
      "confidence": 84,
      "external_references": [
        {
          "source_name": "TechRadar",
          "url": "https://www.techradar.com/pro/security/pandora-confirms-data-breach-customer-data-stolen-heres-what-we-know",
          "external_id": "cit:38713058-1c99-5636-b5ad-bd67e9c391f5",
          "description": "According to the publication, ShinyHunters has been looking for a way into corporate Salesforce databases since January 2025 and have been using different social engineering and phishing tactics.",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:992d1e473bd2fce37580e11f69cc6cf948aed7cd13698b1a5378426efc235640"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Voice phishing induced personnel to authorize a malicious connected OAuth application in Salesforce."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--4fe3f13a-7238-59d9-8e33-84976431792a",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "clm:b7c8a8b9-e4a0-566e-97c4-09dea315d8f6",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "TechRadar",
          "url": "https://www.techradar.com/pro/security/pandora-confirms-data-breach-customer-data-stolen-heres-what-we-know",
          "external_id": "cit:52aca65e-5fde-5a2c-94d6-6ec3f69d1c12",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:992d1e473bd2fce37580e11f69cc6cf948aed7cd13698b1a5378426efc235640"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The reviewed source documents the pandora security incident involving Pandora."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--71758f07-9685-5270-8874-78b44ca44338",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:9b44ee69-f59b-5fd9-bccd-043bb60980ed",
      "confidence": 90,
      "external_references": [],
      "x_ally_claim_object": {
        "kind": "iri",
        "value": "https://attack.mitre.org/techniques/T1566/"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--bd5514a5-b04b-5760-832e-bc70ef4d8d90",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:fd574ab1-1819-5a3e-8c8c-82c7853b4ffe",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "TechRadar",
          "url": "https://www.techradar.com/pro/security/pandora-confirms-data-breach-customer-data-stolen-heres-what-we-know",
          "external_id": "cit:26bcadef-bfd3-5634-8ce9-755c99505f2b",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:992d1e473bd2fce37580e11f69cc6cf948aed7cd13698b1a5378426efc235640"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2025-08-06"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--c350e0b7-42ff-5765-8690-1074a6894160",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:f8cb8f68-6976-5d5f-b852-8f287a7c88b9",
      "confidence": 90,
      "external_references": [],
      "x_ally_claim_object": {
        "kind": "iri",
        "value": "https://attack.mitre.org/techniques/T1528/"
      }
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--7f31936c-34e9-5c6a-84e0-5e4a0cd5730a",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "evt:0bffb967-7f81-5e55-8a69-354ed8e36ed7",
      "name": "Documented public update"
    }
  ]
}