{
  "type": "bundle",
  "id": "bundle--6cdc59e5-7c47-5226-897a-be9f264ef871",
  "objects": [
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--30bc2965-0bda-5f5c-8df7-68ea7477b9df",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "inc:836f23ed-a154-5994-b655-9b2562b8688d",
      "name": "Salt Typhoon telecommunications campaign"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--9119f296-dad7-5176-8c12-53509bbcd76d",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "brh:7247f7a0-2411-5de8-8bac-193eb5ff7032",
      "name": "Salt Typhoon telecommunications campaign"
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--38d62c26-dd2d-5012-89b4-0512385848b2",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:b330378b-7985-569b-a137-ea52a95d1aca",
      "confidence": 84,
      "external_references": [
        {
          "source_name": "CISA",
          "url": "https://www.cisa.gov/resources-tools/resources/enhanced-visibility-and-hardening-guidance-communications-infrastructure",
          "external_id": "cit:8235179e-7e90-55f3-9651-7c385ad64909",
          "description": "The Cybersecurity and Infrastructure Security Agency (CISA), National Security Agency (NSA), Federal Bureau of Investigation (FBI), Australian Signals Directorate’s (ASD’s) Australian Cyber Security Centre (ACSC), Canadian Centre for Cyber Security (CCCS), and New Zealand’s National Cyber Security Centre (NCSC-NZ) warn that People’s Republic of China (PRC)-affiliated threat actors compromised networks of major global telecommunications providers to conduct a broad and significant cyber espionage campaign.",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:8edc33be9b7a614639f04fbbea8b06bce47a2fb58cf6f68f31c753a204b8e66b"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Chinese state-linked breach of major US telecom carriers (AT&T, Verizon, others)."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--a43239e8-75e6-5fb4-81e5-9e152cbaf2ff",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "clm:398f31a2-28f4-5010-be5b-887d4f3de60c",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "CISA",
          "url": "https://www.cisa.gov/resources-tools/resources/enhanced-visibility-and-hardening-guidance-communications-infrastructure",
          "external_id": "cit:520b4890-904c-52f1-ac46-f131d373e33b",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:8edc33be9b7a614639f04fbbea8b06bce47a2fb58cf6f68f31c753a204b8e66b"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The reviewed source documents the salt typhoon telecommunications campaign involving Salt Typhoon."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--c2e061f3-21b4-5c07-89f2-136b3bd82079",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:7f19b18e-ccfe-5aa0-afca-ea9bc425d6b0",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "CISA",
          "url": "https://www.cisa.gov/resources-tools/resources/enhanced-visibility-and-hardening-guidance-communications-infrastructure",
          "external_id": "cit:007ae350-73a7-5af3-a439-7cf5c94545db",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:8edc33be9b7a614639f04fbbea8b06bce47a2fb58cf6f68f31c753a204b8e66b"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2024-12-04"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--d7494d0c-981a-5e84-865e-3a96719ccd86",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:2554f25d-2fc3-55f4-a07b-baccebbff325",
      "confidence": 84,
      "external_references": [
        {
          "source_name": "CISA",
          "url": "https://www.cisa.gov/resources-tools/resources/enhanced-visibility-and-hardening-guidance-communications-infrastructure",
          "external_id": "cit:ed3c63a2-a8eb-5e58-95ab-005d619ef1b4",
          "description": "For NSA client requirements or general cybersecurity inquiries, contact Cybersecurity_Requests@nsa.gov. - Australian organizations: Visit cyber.gov.au or call 1300 292 371 (1300 CYBER 1) to report cybersecurity incidents and access alerts and advisories. - Canadian organizations: Report incidents by emailing CCCS at contact@cyber.gc.ca. - New Zealand organizations: Report cyber security incidents to incidents@ncsc.govt.nz or call 04 498 7654.",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:8edc33be9b7a614639f04fbbea8b06bce47a2fb58cf6f68f31c753a204b8e66b"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Accessed law-enforcement wiretap request systems and call metadata of high-value targets."
      }
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--0caa58f9-77ec-5d07-8ebf-c3dc140d9e8b",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "evt:022a2ca1-944a-5b4c-a90f-832193a904fa",
      "name": "Documented public update"
    }
  ]
}