{
  "type": "bundle",
  "id": "bundle--001e633a-6d2c-506d-8184-08c726f659d4",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--0825a3d5-a944-5008-83bc-08ba6de00b84",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "org:1d027c93-9131-4226-b0f7-cc8809560560",
      "name": "PingCAP",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--11863ba0-16f5-56d9-8a8f-468f2793ed72",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "brh:9be8525c-8817-4808-8418-a936c1bf4791",
      "name": "PingCAP internal-systems credential compromise"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--a2b65603-16c2-558e-8d53-98816209724c",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "inc:b6edc969-1ebd-4b10-83c0-13f781c86ec1",
      "name": "PingCAP internal-systems credential compromise"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--33e460c9-9036-5548-80b9-2166ae65c10f",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "clm:7c49d190-b2ff-4bd7-a186-d83e13770490",
      "relationship_type": "resulted-in",
      "source_ref": "incident--a2b65603-16c2-558e-8d53-98816209724c",
      "target_ref": "x-ally-event--afe010d0-07e4-53d6-8178-2b209c60cf73",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "PingCAP",
          "url": "https://www.pingcap.com/trust-hub/security/ceo-note-october-2026/",
          "external_id": "cit:bc938a2e-d013-435d-8b2c-cc0f8c3621b3",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:6d2578d722ed087c813207ef21e1dc649e375b1f0f6f205a1fca5718c8bdb149"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--46a3d954-4a2e-54d9-8a9f-933b56eef074",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "clm:cf2ed190-aba7-4ede-9bff-aba0bb96bfc1",
      "relationship_type": "affected-organization",
      "source_ref": "incident--a2b65603-16c2-558e-8d53-98816209724c",
      "target_ref": "identity--0825a3d5-a944-5008-83bc-08ba6de00b84",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "PingCAP",
          "url": "https://www.pingcap.com/trust-hub/security/security-update-october-2026/",
          "external_id": "cit:180cdde3-a0ff-4f61-b3f3-85aeb40a5348",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:a5a792ad28a3c41a4483274571ebd947824e3a9d28d557fb54d532eb32ee7939"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--8b34ac12-97c5-57ac-8e15-b9d9f4c2a5da",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "clm:39ac2a01-7e6f-460a-bdf0-4a87b9d169e4",
      "relationship_type": "resulted-in",
      "source_ref": "incident--a2b65603-16c2-558e-8d53-98816209724c",
      "target_ref": "x-ally-event--5e930c08-6b25-56f6-895a-0a7892335f6c",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "PingCAP",
          "url": "https://www.pingcap.com/trust-hub/security/security-update-october-2026/",
          "external_id": "cit:59c89c1e-3051-48aa-980e-c41b97c334a2",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:a5a792ad28a3c41a4483274571ebd947824e3a9d28d557fb54d532eb32ee7939"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--bcf09999-6142-59f1-891c-3044e2cabf08",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "clm:e39af4f0-7929-478a-81c3-294f8e19f2ea",
      "relationship_type": "resulted-in",
      "source_ref": "incident--a2b65603-16c2-558e-8d53-98816209724c",
      "target_ref": "x-ally-event--75b433ad-0987-5687-8b6a-b9685d0963bb",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "PingCAP",
          "url": "https://www.pingcap.com/trust-hub/security/security-update-october-2026/",
          "external_id": "cit:78c453b4-9ebe-4632-aecc-a069a23ffd98",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:a5a792ad28a3c41a4483274571ebd947824e3a9d28d557fb54d532eb32ee7939"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--bf4e63b3-11df-5fdd-8486-fbb4017e1f1f",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "clm:b9345a45-5937-415b-a2cc-3c50b1facee7",
      "relationship_type": "resulted-in",
      "source_ref": "incident--a2b65603-16c2-558e-8d53-98816209724c",
      "target_ref": "x-ally-event--16826936-6b5e-5603-8273-f2d4298a5e31",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "PingCAP",
          "url": "https://www.pingcap.com/trust-hub/security/security-update-october-2026/",
          "external_id": "cit:78fe4d60-3f2d-4a70-a488-86335976e487",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:a5a792ad28a3c41a4483274571ebd947824e3a9d28d557fb54d532eb32ee7939"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--097697e1-6c3a-5604-821c-27ad77da9ab4",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "clm:61c4f553-40f5-43c7-842a-b8a78a24a833",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "NebuSec",
          "url": "https://nebusec.ai/research/pingcap-security-incident/",
          "external_id": "cit:af80d8b4-74c9-47c8-9a59-52ca0d48cae5",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:da5a22e511c587eacbce435826c6a69afe540418d33a82c52000728ab54372df"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "NebuSec found no evidence of access to data stored in customer TiDB databases, attacker command execution or persistence in the production systems reviewed."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--11c43353-298d-592f-817d-b1eae452e7b3",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "clm:071d5a52-46f6-4094-baa7-8d4a1c20707c",
      "confidence": 100,
      "external_references": [],
      "x_ally_claim_object": {
        "kind": "iri",
        "value": "https://attack.mitre.org/techniques/T1552/"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--2289028e-ab66-53df-8381-65ad6d6f0300",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "clm:c57a27cf-b547-40a6-b24a-4754fd00b242",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "PingCAP",
          "url": "https://www.pingcap.com/trust-hub/security/security-update-october-2026/",
          "external_id": "cit:11b3253f-7d33-4b13-b3f8-faf6beb62234",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:a5a792ad28a3c41a4483274571ebd947824e3a9d28d557fb54d532eb32ee7939"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-09-09"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--2abef7dc-6a94-53da-8319-a7150447dc84",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "clm:144ce532-24aa-4ae6-909a-b4f05ea11217",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "PingCAP",
          "url": "https://www.pingcap.com/trust-hub/security/ceo-note-october-2026/",
          "external_id": "cit:c585feea-fe4e-4c93-a3d1-e84b278f98e8",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:6d2578d722ed087c813207ef21e1dc649e375b1f0f6f205a1fca5718c8bdb149"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-23"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--509617ea-f14e-53bc-88f2-0484521caf77",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "clm:5b095254-5530-4e07-8edc-ab45700c25d2",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "PingCAP",
          "url": "https://www.pingcap.com/trust-hub/security/security-update-october-2026/",
          "external_id": "cit:575193e8-2b26-4361-82e9-d03bf833539e",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:a5a792ad28a3c41a4483274571ebd947824e3a9d28d557fb54d532eb32ee7939"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-07"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--5c2f5c1c-ce57-5cda-8a7a-96ff946f26f5",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "clm:6d793bdc-2e77-4b10-aaae-236d48584e45",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "PingCAP",
          "url": "https://www.pingcap.com/trust-hub/security/security-update-october-2026/",
          "external_id": "cit:5602f581-e765-464d-ad86-1a0cb098df1d",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:a5a792ad28a3c41a4483274571ebd947824e3a9d28d557fb54d532eb32ee7939"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-14"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--5fa14e4c-fab1-54a2-8017-3a8adc2d98b4",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "clm:126c0b45-bef0-4319-a195-64fe34422bfc",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "NebuSec",
          "url": "https://nebusec.ai/research/pingcap-security-incident/",
          "external_id": "cit:81b614d9-3bf6-43fe-9851-140a9f7557cb",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:da5a22e511c587eacbce435826c6a69afe540418d33a82c52000728ab54372df"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The attacker used compromised Google Cloud service accounts to export BigQuery tables and download Cloud Storage objects; support-ticket credentials also enabled access to S3 diagnostic-data buckets."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--60b5bbf3-0d7c-5863-8681-958e52a09662",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "clm:a01b397e-3f32-4202-84bc-aa95f3b52564",
      "confidence": 100,
      "external_references": [],
      "x_ally_claim_object": {
        "kind": "iri",
        "value": "https://attack.mitre.org/techniques/T1078/004/"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--63bd93b1-5529-57b5-8315-b2e89e6e0b7e",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "clm:21dd2927-83cf-4b0d-b9ea-6b9da71d4bc6",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "PingCAP",
          "url": "https://www.pingcap.com/trust-hub/security/security-update-october-2026/",
          "external_id": "cit:6cd7586e-5507-4704-bd16-a9c0329c8a3f",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:a5a792ad28a3c41a4483274571ebd947824e3a9d28d557fb54d532eb32ee7939"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-19"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--77648b7b-385b-5254-8400-365f758ecbff",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "clm:7d98c307-2749-467f-a4ff-5f47e9606c01",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "NebuSec",
          "url": "https://nebusec.ai/research/pingcap-security-incident/",
          "external_id": "cit:a730dad2-1723-43d5-ad60-59a05aebc382",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:da5a22e511c587eacbce435826c6a69afe540418d33a82c52000728ab54372df"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Credential disabling began October 7; by October 14 identified compromised credentials and access paths were revoked or blocked. Four vulnerabilities found during proactive source-code review were fixed and retested, with no evidence of prior exploitation."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--9c95c5ae-f64c-5b76-8dd7-bae9ed5e0160",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "clm:aa6c234b-2b0f-4670-9b36-41ea96a37950",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "NebuSec",
          "url": "https://nebusec.ai/research/pingcap-security-incident/",
          "external_id": "cit:17b41faa-fc52-4510-85a7-cb3286ef55b3",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:da5a22e511c587eacbce435826c6a69afe540418d33a82c52000728ab54372df"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Copied records included account and organization information, SQL editor history, business and billing records, support materials, internal chat and employee information; customer-specific scope varied and remained under review."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--a83a4cd4-43b0-52fd-8c5b-07c04e7972fd",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "clm:52191292-2846-4694-9b4a-ee4b9db925ef",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "PingCAP",
          "url": "https://www.pingcap.com/trust-hub/security/security-update-october-2026/",
          "external_id": "cit:3030dc74-e317-4b5c-96fa-d76997986d7b",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:a5a792ad28a3c41a4483274571ebd947824e3a9d28d557fb54d532eb32ee7939"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-07"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--b818ebb9-04df-5516-869c-ab1a099cf9fc",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "clm:39baf91a-5a18-41fa-9816-bf5fe15006d9",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "PingCAP",
          "url": "https://www.pingcap.com/trust-hub/security/security-update-october-2026/",
          "external_id": "cit:83c298ec-1a74-4b3a-9787-21500a151400",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:a5a792ad28a3c41a4483274571ebd947824e3a9d28d557fb54d532eb32ee7939"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-19"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--cefd3294-ebb4-5f1f-8ad8-3b1a7a570ef8",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "clm:bf83641b-6ca8-4907-8d59-c60c8e22610e",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "PingCAP",
          "url": "https://www.pingcap.com/trust-hub/security/security-update-october-2026/",
          "external_id": "cit:0f09b329-9163-439d-a09c-d21f853a9f36",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:a5a792ad28a3c41a4483274571ebd947824e3a9d28d557fb54d532eb32ee7939"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "PingCAP reported unauthorized access and data copying from internal systems between September 9 and October 7, 2026, including source code and customer-related records."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--cf03afc0-79e3-5e2a-8d10-a3b62675ea24",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "clm:ae589cae-3da1-453c-820b-0d90a96d2318",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "NebuSec",
          "url": "https://nebusec.ai/research/pingcap-security-incident/",
          "external_id": "cit:dde8f4b7-d30a-470e-ad56-c5977ccdb120",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:da5a22e511c587eacbce435826c6a69afe540418d33a82c52000728ab54372df"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "NebuSec traced entry to a compromised GitHub account and keys exposed in private repositories and Terraform state; the attacker used those credentials to reach Google Cloud, Jira and internal messaging systems."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--d436cb33-5d2a-5d49-8399-92efb149b890",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "clm:83284346-61e1-465e-ae53-97334fecf97a",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "PingCAP",
          "url": "https://www.pingcap.com/trust-hub/security/ceo-note-october-2026/",
          "external_id": "cit:73ddf7f2-19bb-4c35-9fd2-de8bcc5ba250",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:6d2578d722ed087c813207ef21e1dc649e375b1f0f6f205a1fca5718c8bdb149"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "PingCAP urged customers to replace management API keys and rotate credentials or secrets previously shared with support, without waiting for individual notification."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--d8cc3940-0cf9-5c54-849d-abd27e142d28",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "clm:578c639b-829e-4c6c-8e60-a392825bc199",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "PingCAP",
          "url": "https://www.pingcap.com/trust-hub/security/security-update-october-2026/",
          "external_id": "cit:16ebfb82-71e4-4354-94d3-e79617ba8676",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:a5a792ad28a3c41a4483274571ebd947824e3a9d28d557fb54d532eb32ee7939"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-07"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--ed951bb4-1361-577a-8584-441d30bb72d5",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "clm:52d4e45d-6c0c-4cd2-b369-c4e2f5ad794b",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "NebuSec",
          "url": "https://nebusec.ai/research/pingcap-security-incident/",
          "external_id": "cit:1e11bd98-ba74-47e4-91c0-a653b258d2e5",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:da5a22e511c587eacbce435826c6a69afe540418d33a82c52000728ab54372df"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Exported TiDB Cloud API-key values were encrypted and the encryption key was not exposed; this finding did not apply to usable credentials shared in support materials."
      }
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--16826936-6b5e-5603-8273-f2d4298a5e31",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "evt:b60de42f-105b-4f28-8978-16f07ecec5f4",
      "name": "Security report published"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--5e930c08-6b25-56f6-895a-0a7892335f6c",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "evt:4e764367-1303-47f1-9f64-a1f579370684",
      "name": "Identified access paths closed"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--75b433ad-0987-5687-8b6a-b9685d0963bb",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "evt:683d2ff4-f7ca-4888-8cf4-2aa033dfbb11",
      "name": "Incident detected and credential revocation began"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--afe010d0-07e4-53d6-8178-2b209c60cf73",
      "created": "2026-10-24T14:23:34.425884+00:00",
      "modified": "2026-10-24T14:23:34.425884+00:00",
      "x_ally_original_id": "evt:816cdede-5179-474e-96aa-b075765a8dfe",
      "name": "Customer actions reiterated"
    }
  ]
}