{
  "type": "bundle",
  "id": "bundle--f7d75e2c-1052-5b34-847b-e019155e9897",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--28988db6-81f4-5572-84b8-b856043f1f2f",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "org:a0de65d5-6154-5b3f-bbc3-9ffa95f0ba30",
      "name": "QuoteWizard",
      "identity_class": "organization"
    },
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--de733e54-6a64-54d0-873d-55c8f4469232",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "org:0524b182-5395-53a6-b927-7ce9a6c21b6a",
      "name": "LendingTree",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--28f68310-07a5-59cd-8567-07c18d7e273c",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "brh:755e3b32-2605-525e-94a1-44bcef937db3",
      "name": "QuoteWizard / LendingTree security incident"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--ffc98d54-a113-57bb-83fa-3ee4c8bb9472",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "inc:4512c40b-7a73-5003-9c45-1894c294c024",
      "name": "QuoteWizard / LendingTree security incident"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--c32d80d0-b32f-542b-8639-fb3206c5b899",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "clm:271db829-088c-5575-b9c9-1423f0c91638",
      "relationship_type": "affected-organization",
      "source_ref": "incident--ffc98d54-a113-57bb-83fa-3ee4c8bb9472",
      "target_ref": "identity--28988db6-81f4-5572-84b8-b856043f1f2f",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "U.S. District Court for the District of Montana",
          "url": "https://www.mtd.uscourts.gov/node/628",
          "external_id": "cit:258eb3cc-e2c6-5f85-a9c5-1a901a18b57d",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:2980480b8d29cd2699a7d6f1340022d5124b5dbf3210a3a428bbb3f663d6e5da"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--d2df2773-b5c2-539e-8236-16f1c5395904",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "clm:5a477627-5e3f-5311-be7b-d12355ed93a0",
      "relationship_type": "affected-organization",
      "source_ref": "incident--ffc98d54-a113-57bb-83fa-3ee4c8bb9472",
      "target_ref": "identity--de733e54-6a64-54d0-873d-55c8f4469232",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "U.S. District Court for the District of Montana",
          "url": "https://www.mtd.uscourts.gov/node/628",
          "external_id": "cit:bc51286b-4e3e-593c-a0e3-379fcadf284f",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:2980480b8d29cd2699a7d6f1340022d5124b5dbf3210a3a428bbb3f663d6e5da"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--3d4b4dcf-e5b4-586a-8246-5cb2431de3e7",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:72f72264-262c-5376-a9f2-9983452a35ab",
      "confidence": 86,
      "external_references": [
        {
          "source_name": "U.S. District Court for the District of Montana",
          "url": "https://www.mtd.uscourts.gov/node/628",
          "external_id": "cit:b8c548c4-40f5-51af-a940-953de10573d9",
          "description": "Snowflake, Data Security Breach Litigation",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:2980480b8d29cd2699a7d6f1340022d5124b5dbf3210a3a428bbb3f663d6e5da"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Customer data exposed."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--6c8c4d7b-c811-589a-89bc-573f8154bd74",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:23ccb374-aa1c-50b8-9105-228fb73a80ce",
      "confidence": 84,
      "external_references": [
        {
          "source_name": "U.S. District Court for the District of Montana",
          "url": "https://www.mtd.uscourts.gov/node/628",
          "external_id": "cit:a4bb7185-2116-5442-b8c0-5f462204298f",
          "description": "With Prejudice | 12/19/2025 | | | | +--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------------------------+ | | | | Order Granting Joint Motion to Dismiss Claims by Neiman Marcus Plantiffs Against Defendant Snowflake Inc.",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:2980480b8d29cd2699a7d6f1340022d5124b5dbf3210a3a428bbb3f663d6e5da"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Stolen credentials were used against a Snowflake customer account that did not enforce MFA."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--6d7f03f5-62dd-559e-8a8f-96b61314b7e8",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:9a85fa42-a4cc-597b-aeb9-3c02988d3bd6",
      "confidence": 90,
      "external_references": [],
      "x_ally_claim_object": {
        "kind": "iri",
        "value": "https://attack.mitre.org/techniques/T1078/"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--b388ecaa-c87c-51da-8fe9-cca2cb00da6d",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "clm:a9ca78e6-ca2c-5595-9d4c-e60217e0e079",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "U.S. District Court for the District of Montana",
          "url": "https://www.mtd.uscourts.gov/node/628",
          "external_id": "cit:67079cd0-96fe-55aa-b635-a888bab75e95",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:2980480b8d29cd2699a7d6f1340022d5124b5dbf3210a3a428bbb3f663d6e5da"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The reviewed source documents the quotewizard / lendingtree security incident involving QuoteWizard, LendingTree."
      }
    }
  ]
}