{
  "type": "bundle",
  "id": "bundle--15dc805e-a479-5c5e-8a11-e030dfbec224",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--8ee525d3-6b62-5b08-84bc-aabe3e1ba26c",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "org:52ee8645-944e-52cf-ab43-eaf0b7902ccb",
      "name": "Reddit",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--4158b26f-c4c9-53dd-8950-93b3a179f54b",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "brh:10e88ce7-da14-5198-878f-8177ad860d26",
      "name": "Reddit security incident"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--80c6b248-69b1-553c-8187-547765ad2cb1",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "inc:e9c3cfee-da29-550a-b1c8-50cdf2a9b689",
      "name": "Reddit security incident"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--c9264d8d-7fbd-5d3b-8a03-a216ffcf710a",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "clm:43e980bc-aa9d-5b7b-acd1-512a4566a300",
      "relationship_type": "affected-organization",
      "source_ref": "incident--80c6b248-69b1-553c-8187-547765ad2cb1",
      "target_ref": "identity--8ee525d3-6b62-5b08-84bc-aabe3e1ba26c",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Reddit",
          "url": "https://www.reddit.com/r/reddit/comments/10y427y/we_had_a_security_incident_heres_what_we_know/",
          "external_id": "cit:6ebd4073-fa1e-50e9-9796-3042f20e2f20",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:553ef2bfb1dcc07cb72eaf152b02bf3daec140e546a4d8a854467ba657bf20ca"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--2e210a82-94ad-5c9d-8e4e-cf88558ce1f0",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:aa19998a-3acc-5ffa-8091-df721629da56",
      "confidence": 95,
      "external_references": [
        {
          "source_name": "Reddit",
          "url": "https://www.reddit.com/r/reddit/comments/10y427y/we_had_a_security_incident_heres_what_we_know/",
          "external_id": "cit:85c7d685-36d6-56af-9d04-f038f5112059",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:cb1bddfb186453ab7a7570978e7b209b6dc885983db5442072b9a510cf50de9c"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The attacker accessed internal documents, code, dashboards, business systems, and limited contact information for employees and company contacts."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--2e988957-1d25-545c-8399-04ed9506e4a2",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:051107b9-e26b-5b21-95e4-731ebcc6f852",
      "confidence": 95,
      "external_references": [
        {
          "source_name": "Reddit",
          "url": "https://www.reddit.com/r/reddit/comments/10y427y/we_had_a_security_incident_heres_what_we_know/",
          "external_id": "cit:77348b87-4f3a-5f45-95b3-ce0bc6c57dcf",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:cb1bddfb186453ab7a7570978e7b209b6dc885983db5442072b9a510cf50de9c"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The employee self-reported the phishing event; Reddit removed the attacker’s access and began an internal investigation."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--52d82080-191c-5193-84a0-59239010ccf3",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:c67f2f13-394d-5bc9-a9b1-02be0c9884f6",
      "confidence": 95,
      "external_references": [
        {
          "source_name": "Reddit",
          "url": "https://www.reddit.com/r/reddit/comments/10y427y/we_had_a_security_incident_heres_what_we_know/",
          "external_id": "cit:f327ea4a-4c2c-5771-83ed-eeb845a6dcf9",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:cb1bddfb186453ab7a7570978e7b209b6dc885983db5442072b9a510cf50de9c"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "A targeted phishing site copied Reddit’s intranet gateway and captured one employee’s credentials and second-factor token."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--68e22563-d2df-50fb-8da4-b9c44919f334",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "clm:928fb346-549f-50d5-b952-e7c955683dd4",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Reddit",
          "url": "https://www.reddit.com/r/reddit/comments/10y427y/we_had_a_security_incident_heres_what_we_know/",
          "external_id": "cit:bce32be6-3285-5057-8053-97a0b0924f7a",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:553ef2bfb1dcc07cb72eaf152b02bf3daec140e546a4d8a854467ba657bf20ca"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The reviewed source documents the reddit security incident involving Reddit."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--dfa59993-1245-53fd-8adf-0fb4d7489dba",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:a253a70e-bac1-5c1d-8331-622243cf3491",
      "confidence": 90,
      "external_references": [],
      "x_ally_claim_object": {
        "kind": "iri",
        "value": "https://attack.mitre.org/techniques/T1566/"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--fb4e20e5-489d-55a6-8c07-f89f8d9a1eda",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:bfc57d9e-f072-5766-a12b-d5ec91f12301",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Reddit",
          "url": "https://www.reddit.com/r/reddit/comments/10y427y/we_had_a_security_incident_heres_what_we_know/",
          "external_id": "cit:04680119-1bd8-59d7-8dab-9c4f044e20d8",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:cb1bddfb186453ab7a7570978e7b209b6dc885983db5442072b9a510cf50de9c"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2023-02-05"
      }
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--20f6a6ed-e0b9-51b3-8714-48077e660be3",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "evt:68d7d335-cf67-559a-bd9f-263533e28715",
      "name": "Documented public update"
    }
  ]
}