{
  "type": "bundle",
  "id": "bundle--9f2284b6-1b0c-5e45-867d-9fe752de035f",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--e127ee04-985a-5e41-8994-181093946e51",
      "created": "2026-08-09T08:21:34Z",
      "modified": "2026-08-09T08:21:34Z",
      "x_ally_original_id": "org:5ac8d425-b4df-43e1-9919-c25f3c9cdbbb",
      "name": "Panera Bread",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--58a91ce0-037e-547f-8d12-067c0d7489f9",
      "created": "2026-08-09T08:21:34Z",
      "modified": "2026-08-09T08:21:34Z",
      "x_ally_original_id": "brh:dfdfdfff-75b6-479f-a427-1f6008b441c2",
      "name": "Panera Bread contact-information data breach"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--6098ef93-6440-5aea-8b40-69e9762053e7",
      "created": "2026-08-09T08:21:34Z",
      "modified": "2026-08-09T08:21:34Z",
      "x_ally_original_id": "inc:ee7c8e99-8849-44f6-9935-5ea0a3d3fd0a",
      "name": "January 2026 Panera Bread data breach"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--2439df03-56c2-5267-897e-c155837db597",
      "created": "2026-08-09T08:21:34Z",
      "modified": "2026-08-09T08:21:34Z",
      "x_ally_original_id": "clm:5dadc63e-5ae5-40e6-9792-06cd38398194",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--4de9411e-287c-5d49-868d-99f3c7647602",
      "target_ref": "x-ally-data-category--a2b7dd9d-0c02-5710-88ed-ea507d0ffa07",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Have I Been Pwned",
          "url": "https://haveibeenpwned.com/api/v3/breach/PaneraBread",
          "external_id": "cit:6d6c8808-6ba9-4e6e-9f76-058b3c8013b0",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:322b83023fe21cb030e70c2eaeb6cd86decca5c8a5401651f09af63fd4a929e8"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--557ec70a-9fce-5bb4-8594-256ba4c48107",
      "created": "2026-08-09T08:21:34Z",
      "modified": "2026-08-09T08:21:34Z",
      "x_ally_original_id": "clm:e8cbd6f2-c7de-4c3f-9998-2342ef63cdaa",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--4de9411e-287c-5d49-868d-99f3c7647602",
      "target_ref": "x-ally-data-category--c79f34f3-405d-57d2-8409-98eff3898231",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Have I Been Pwned",
          "url": "https://haveibeenpwned.com/api/v3/breach/PaneraBread",
          "external_id": "cit:c44d0edf-6675-401d-bf8a-2552b5aaaa41",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:322b83023fe21cb030e70c2eaeb6cd86decca5c8a5401651f09af63fd4a929e8"
        },
        {
          "source_name": "Reuters (syndicated by MarketScreener)",
          "url": "https://www.marketscreener.com/news/bumble-panera-bread-crunchbase-match-hit-by-cyberattacks-bloomberg-news-ce7e5bdedb8af627",
          "external_id": "cit:d9b8724a-079b-44c9-bb48-4b5282a4b7fb",
          "x_ally_stance": "qualifies",
          "x_ally_snapshot_id": "snp:sha256:6739c81b4e9a9f9434d8493aa2d61a86eea498558473285929e941d53c7dc4e4"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--8a14febc-4f0f-5d28-8f87-0a6a0e358a2b",
      "created": "2026-08-09T08:21:34Z",
      "modified": "2026-08-09T08:21:34Z",
      "x_ally_original_id": "clm:7e417941-e532-486a-b618-a75f16a4f321",
      "relationship_type": "resulted-in",
      "source_ref": "incident--6098ef93-6440-5aea-8b40-69e9762053e7",
      "target_ref": "x-ally-data-exposure--4de9411e-287c-5d49-868d-99f3c7647602",
      "confidence": 95,
      "external_references": [
        {
          "source_name": "Have I Been Pwned",
          "url": "https://haveibeenpwned.com/api/v3/breach/PaneraBread",
          "external_id": "cit:9841de08-ecc6-4b86-9f6b-4e8ddb695fe2",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:322b83023fe21cb030e70c2eaeb6cd86decca5c8a5401651f09af63fd4a929e8"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--cbcf03ca-1aa1-54d1-8394-8cee7543f861",
      "created": "2026-08-09T08:21:34Z",
      "modified": "2026-08-09T08:21:34Z",
      "x_ally_original_id": "clm:81f15751-32ef-4109-85a6-750fa8cd9e2a",
      "relationship_type": "attributed-to",
      "source_ref": "incident--6098ef93-6440-5aea-8b40-69e9762053e7",
      "target_ref": "x-ally-threat-actor--9f8bab7d-064a-5954-85ba-00242cf94bac",
      "confidence": 70,
      "external_references": [
        {
          "source_name": "BleepingComputer",
          "url": "https://www.bleepingcomputer.com/news/security/panera-bread-data-breach-impacts-51-million-accounts-not-14-million-customers/",
          "external_id": "cit:2ce72a63-1753-4930-931f-2e2160c60902",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:2bc9439dc63e58e62a8d7711e1a95c75948412e935d34033fb9190056cb0ccef"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--e1662758-8ce6-5f03-8c50-84dc6db9de4c",
      "created": "2026-08-09T08:21:34Z",
      "modified": "2026-08-09T08:21:34Z",
      "x_ally_original_id": "clm:200198af-f096-4397-8e77-b8dfe8d930f8",
      "relationship_type": "affected-organization",
      "source_ref": "incident--6098ef93-6440-5aea-8b40-69e9762053e7",
      "target_ref": "identity--e127ee04-985a-5e41-8994-181093946e51",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Reuters (syndicated by MarketScreener)",
          "url": "https://www.marketscreener.com/news/bumble-panera-bread-crunchbase-match-hit-by-cyberattacks-bloomberg-news-ce7e5bdedb8af627",
          "external_id": "cit:f7ab0c8a-5315-40a0-aee6-91effb84bc0d",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:6739c81b4e9a9f9434d8493aa2d61a86eea498558473285929e941d53c7dc4e4"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--1ae7d5de-15e2-5133-8187-cda7cceedb58",
      "created": "2026-08-09T08:21:34Z",
      "modified": "2026-08-09T08:21:34Z",
      "x_ally_original_id": "clm:66cefc8a-7f95-4c7e-9f95-b042948a14c6",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Have I Been Pwned",
          "url": "https://haveibeenpwned.com/api/v3/breach/PaneraBread",
          "external_id": "cit:03ca61ca-3cf1-44e7-b817-977f826b1ad0",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:322b83023fe21cb030e70c2eaeb6cd86decca5c8a5401651f09af63fd4a929e8"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "integer",
        "value": 5112502,
        "unit": "record"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--43553118-6ea0-578a-8483-b8a788af4f94",
      "created": "2026-08-09T08:21:34Z",
      "modified": "2026-08-09T08:21:34Z",
      "x_ally_original_id": "clm:97383ea9-7d17-48a8-a753-bccc57c98972",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Reuters (syndicated by MarketScreener)",
          "url": "https://www.marketscreener.com/news/bumble-panera-bread-crunchbase-match-hit-by-cyberattacks-bloomberg-news-ce7e5bdedb8af627",
          "external_id": "cit:1ca01564-ca90-476f-b4f1-ce8714a2c3c9",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:6739c81b4e9a9f9434d8493aa2d61a86eea498558473285929e941d53c7dc4e4"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-01-28"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--4c7ffff2-5c41-56e7-8308-302cf2819dd4",
      "created": "2026-08-09T08:21:34Z",
      "modified": "2026-08-09T08:21:34Z",
      "x_ally_original_id": "clm:1e9375eb-1d4a-4bcb-b816-172ef03c2631",
      "confidence": 85,
      "external_references": [
        {
          "source_name": "BleepingComputer",
          "url": "https://www.bleepingcomputer.com/news/security/panera-bread-data-breach-impacts-51-million-accounts-not-14-million-customers/",
          "external_id": "cit:70c82f24-6e0a-4062-a721-934ac5e77e0b",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:2bc9439dc63e58e62a8d7711e1a95c75948412e935d34033fb9190056cb0ccef"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "BleepingComputer found more than 26,000 unique panerabread.com email addresses in the released records and assessed that they likely belonged to Panera Bread employees."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--4f310e6d-de93-52ac-8182-d72046ce400d",
      "created": "2026-08-09T08:21:34Z",
      "modified": "2026-08-09T08:21:34Z",
      "x_ally_original_id": "clm:a5ed88e2-4f41-47f8-93d5-b47eed3af4dd",
      "confidence": 80,
      "external_references": [
        {
          "source_name": "Have I Been Pwned",
          "url": "https://haveibeenpwned.com/api/v3/breach/PaneraBread",
          "external_id": "cit:34a44ce6-a59b-41b2-b48e-b2ef611b784a",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:322b83023fe21cb030e70c2eaeb6cd86decca5c8a5401651f09af63fd4a929e8"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-01-07"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--543ab986-d52c-5431-862b-06656ab09c0b",
      "created": "2026-08-09T08:21:34Z",
      "modified": "2026-08-09T08:21:34Z",
      "x_ally_original_id": "clm:e92f0262-1b4f-4b7b-8dbd-a9ddc0852f44",
      "confidence": 90,
      "external_references": [
        {
          "source_name": "Have I Been Pwned",
          "url": "https://haveibeenpwned.com/api/v3/breach/PaneraBread",
          "external_id": "cit:c836ce68-08e4-43d1-b21d-5a5286b68796",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:322b83023fe21cb030e70c2eaeb6cd86decca5c8a5401651f09af63fd4a929e8"
        },
        {
          "source_name": "BleepingComputer",
          "url": "https://www.bleepingcomputer.com/news/security/panera-bread-data-breach-impacts-51-million-accounts-not-14-million-customers/",
          "external_id": "cit:51a0bdfd-63df-4314-8622-00fcbb648ef3",
          "x_ally_stance": "qualifies",
          "x_ally_snapshot_id": "snp:sha256:2bc9439dc63e58e62a8d7711e1a95c75948412e935d34033fb9190056cb0ccef"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "After an attempted extortion, an archive associated with Panera Bread was published on the ShinyHunters leak site."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--621a454f-3ecc-5ad5-8e1a-40f959e748c6",
      "created": "2026-08-09T08:21:34Z",
      "modified": "2026-08-09T08:21:34Z",
      "x_ally_original_id": "clm:dade520c-13b2-4e1d-9efe-0398c61dcacc",
      "confidence": 65,
      "external_references": [
        {
          "source_name": "Have I Been Pwned",
          "url": "https://haveibeenpwned.com/api/v3/breach/PaneraBread",
          "external_id": "cit:e3b23336-d23e-4a29-8ce2-ebfe00210540",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:322b83023fe21cb030e70c2eaeb6cd86decca5c8a5401651f09af63fd4a929e8"
        },
        {
          "source_name": "BleepingComputer",
          "url": "https://www.bleepingcomputer.com/news/security/panera-bread-data-breach-impacts-51-million-accounts-not-14-million-customers/",
          "external_id": "cit:af55607e-2761-43d3-98a4-aa9f829da6ba",
          "x_ally_stance": "qualifies",
          "x_ally_snapshot_id": "snp:sha256:2bc9439dc63e58e62a8d7711e1a95c75948412e935d34033fb9190056cb0ccef"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "integer",
        "value": 14000000,
        "unit": "record",
        "approximate": true
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--92fe4418-043a-5b16-8dc6-dbdeaaf64592",
      "created": "2026-08-09T08:21:34Z",
      "modified": "2026-08-09T08:21:34Z",
      "x_ally_original_id": "clm:6606d53c-98de-4061-9982-315ea226a86c",
      "confidence": 95,
      "external_references": [
        {
          "source_name": "BleepingComputer",
          "url": "https://www.bleepingcomputer.com/news/security/panera-bread-data-breach-impacts-51-million-accounts-not-14-million-customers/",
          "external_id": "cit:538845cd-96a7-4c01-b1b3-ed8a74eefa01",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:2bc9439dc63e58e62a8d7711e1a95c75948412e935d34033fb9190056cb0ccef"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "integer",
        "value": 5120000,
        "unit": "record",
        "approximate": true
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--9fed51d2-ba1a-51a5-8742-f40d60df0c9c",
      "created": "2026-08-09T08:21:34Z",
      "modified": "2026-08-09T08:21:34Z",
      "x_ally_original_id": "clm:eb8c9f4c-4dab-4f8f-aaf0-a5ee49ed78fd",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Reuters (syndicated by MarketScreener)",
          "url": "https://www.marketscreener.com/news/bumble-panera-bread-crunchbase-match-hit-by-cyberattacks-bloomberg-news-ce7e5bdedb8af627",
          "external_id": "cit:55899b2c-ef95-4e30-aa49-8c467e2093fd",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:6739c81b4e9a9f9434d8493aa2d61a86eea498558473285929e941d53c7dc4e4"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Panera Bread characterized the data involved as contact information."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--f29f1098-cca9-59b5-8940-c33e945d0c01",
      "created": "2026-08-09T08:21:34Z",
      "modified": "2026-08-09T08:21:34Z",
      "x_ally_original_id": "clm:a77780ba-82ac-47bd-95e8-df429a786709",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Reuters (syndicated by MarketScreener)",
          "url": "https://www.marketscreener.com/news/bumble-panera-bread-crunchbase-match-hit-by-cyberattacks-bloomberg-news-ce7e5bdedb8af627",
          "external_id": "cit:7e00f955-6f6f-4ef3-a368-1e347cdaf9a7",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:6739c81b4e9a9f9434d8493aa2d61a86eea498558473285929e941d53c7dc4e4"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Panera Bread said it alerted authorities about the incident."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--f3174a4c-350e-50b2-8888-5e56b5c7a961",
      "created": "2026-08-09T08:21:34Z",
      "modified": "2026-08-09T08:21:34Z",
      "x_ally_original_id": "clm:0f8b4ef9-0c01-4cec-a191-088ae8a574b2",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Reuters (syndicated by MarketScreener)",
          "url": "https://www.marketscreener.com/news/bumble-panera-bread-crunchbase-match-hit-by-cyberattacks-bloomberg-news-ce7e5bdedb8af627",
          "external_id": "cit:4f5b5b8d-a700-451c-82af-02951d4b2320",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:6739c81b4e9a9f9434d8493aa2d61a86eea498558473285929e941d53c7dc4e4"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Panera Bread confirmed to Reuters by email that an incident occurred."
      }
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--a2b7dd9d-0c02-5710-88ed-ea507d0ffa07",
      "created": "2026-08-08T23:12:00Z",
      "modified": "2026-08-08T23:12:00Z",
      "x_ally_original_id": "dat:559cf3f5-80c7-45ba-a930-ff0bfa8d17b0",
      "name": "Names"
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--c79f34f3-405d-57d2-8409-98eff3898231",
      "created": "2026-08-08T23:12:00Z",
      "modified": "2026-08-08T23:12:00Z",
      "x_ally_original_id": "dat:5abcee7e-4a37-494a-b6ba-87ff46149be9",
      "name": "Contact information"
    },
    {
      "type": "x-ally-data-exposure",
      "spec_version": "2.1",
      "id": "x-ally-data-exposure--4de9411e-287c-5d49-868d-99f3c7647602",
      "created": "2026-08-09T08:21:34Z",
      "modified": "2026-08-09T08:21:34Z",
      "x_ally_original_id": "exp:49cad7ae-c380-4818-b6d1-9fb0b7c7a4f5",
      "name": "Panera Bread contact-information corpus"
    },
    {
      "type": "x-ally-threat-actor",
      "spec_version": "2.1",
      "id": "x-ally-threat-actor--9f8bab7d-064a-5954-85ba-00242cf94bac",
      "created": "2026-08-09T07:43:33Z",
      "modified": "2026-08-09T07:43:33Z",
      "x_ally_original_id": "act:207e0651-44ea-4e76-8773-7acae4d56d14",
      "name": "ShinyHunters"
    }
  ]
}