{
  "type": "bundle",
  "id": "bundle--a9c8f170-1d55-5331-8a11-a01e31a9bdec",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--22b9ac31-f95b-561c-8b28-5afc4281155c",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "org:e53a6b6e-93da-48c4-a57b-3545b1224f6a",
      "name": "Shippio",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--2d552ea4-b437-58ce-8bde-fb607121a58d",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "brh:29d1228f-35ab-4838-8c14-ab5ad737e277",
      "name": "Shippio platform data and credential incident"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--c47cd394-10ff-573c-8fcc-9d47ccba1900",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "inc:6442e884-b1c6-4850-904c-72b43e53b5ef",
      "name": "Shippio platform data and credential incident"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--35661a29-c1b4-5e9b-803b-bfed06a5db7e",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "clm:f11d8011-397f-4d5c-bbe0-3b66c300060f",
      "relationship_type": "resulted-in",
      "source_ref": "incident--c47cd394-10ff-573c-8fcc-9d47ccba1900",
      "target_ref": "x-ally-event--27a853b9-4115-5961-8ac4-c162cf80ba00",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Shippio",
          "url": "https://www.shippio.io/news/20261104/",
          "external_id": "cit:38bc7172-2d2d-42ca-be22-c0a6e77a0d59",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:059acb072a4459178782d32d709f560380083d727a9aceab26f79ddabff383a0"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--6cac6551-1e6d-5849-8d48-b44b576be0e8",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "clm:409588a6-de3f-4496-9fc0-d540a63a88a1",
      "relationship_type": "resulted-in",
      "source_ref": "incident--c47cd394-10ff-573c-8fcc-9d47ccba1900",
      "target_ref": "x-ally-event--952cc490-6bcd-5c1d-8c7d-7305634afa68",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Shippio",
          "url": "https://www.shippio.io/news/20261104/",
          "external_id": "cit:f9d01951-ce50-460b-ab2e-5b9c4475fe8d",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:059acb072a4459178782d32d709f560380083d727a9aceab26f79ddabff383a0"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--9d09128f-96cd-545d-8243-72a720e107c0",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "clm:02432237-b2e5-4a84-adf9-76fce0e49095",
      "relationship_type": "affected-organization",
      "source_ref": "incident--c47cd394-10ff-573c-8fcc-9d47ccba1900",
      "target_ref": "identity--22b9ac31-f95b-561c-8b28-5afc4281155c",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Shippio",
          "url": "https://www.shippio.io/news/20261104/",
          "external_id": "cit:e3c7e10c-6b6a-427f-9750-c8f3c020ebed",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:059acb072a4459178782d32d709f560380083d727a9aceab26f79ddabff383a0"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--d24aa31c-b5f4-5383-8042-1c5b7e84fcc8",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "clm:633a6373-8ce4-485c-b9d7-447669fb30b6",
      "relationship_type": "resulted-in",
      "source_ref": "incident--c47cd394-10ff-573c-8fcc-9d47ccba1900",
      "target_ref": "x-ally-event--6f831ac9-b678-568d-80d6-5c6ad3bacb22",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Shippio",
          "url": "https://www.shippio.io/news/20261104/",
          "external_id": "cit:6409f25f-4dec-43d5-bb8d-3fe2aa43afc6",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:059acb072a4459178782d32d709f560380083d727a9aceab26f79ddabff383a0"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--1b7052cf-857b-54df-8687-a00622af23b4",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "clm:b6ac96c6-f017-4052-91bb-8bdc4e440d76",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Shippio",
          "url": "https://www.shippio.io/news/20261104/",
          "external_id": "cit:aa2d2592-2007-479e-a827-1f7be731c994",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:059acb072a4459178782d32d709f560380083d727a9aceab26f79ddabff383a0"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-30"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--1eb91c8e-c64b-500a-8bc0-f33b5c17a15d",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "clm:a59d4c88-2446-4ee4-8ba0-f86fe1a38494",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Shippio",
          "url": "https://www.shippio.io/news/20261104/",
          "external_id": "cit:27abe8f4-f097-480e-bdc3-d42f58aa90b2",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:059acb072a4459178782d32d709f560380083d727a9aceab26f79ddabff383a0"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "All customers’ company and team contact information was viewed. Shipment details and document names were viewed for nearly all customers with shipments; about 1,300 document files were downloaded."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--31215719-24d6-5891-8112-240ee00e13a2",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "clm:623f8169-f60a-4bc3-8bc8-8df5ae9799c2",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Shippio",
          "url": "https://www.shippio.io/news/20261104/",
          "external_id": "cit:c3e942b6-1f4f-461d-852e-9851ed5c4878",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:059acb072a4459178782d32d709f560380083d727a9aceab26f79ddabff383a0"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-11-04"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--4139279c-bb5e-5b93-86e0-8c0f5e2cad32",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "clm:5147927b-08b3-4882-9214-89bb9b29f8bd",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Shippio",
          "url": "https://www.shippio.io/news/20261104/",
          "external_id": "cit:e933a761-9816-47c1-84b2-d9975a151176",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:059acb072a4459178782d32d709f560380083d727a9aceab26f79ddabff383a0"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-11-04"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--436ca837-42df-56cc-8150-48ebbf02c3dc",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "clm:907a2b5a-972b-424c-a772-cf7a5f9b5614",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Shippio",
          "url": "https://www.shippio.io/news/20261104/",
          "external_id": "cit:5d85b788-858c-4a67-b22f-f76b63d41fe6",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:059acb072a4459178782d32d709f560380083d727a9aceab26f79ddabff383a0"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-11-02"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--50366012-b40d-5dde-83fb-73a7afafa6b2",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "clm:7717a798-dc75-4dea-b51c-dd4eaacaddff",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Shippio",
          "url": "https://www.shippio.io/news/20261104/",
          "external_id": "cit:c5639916-0f90-487a-98a6-e63bc5c74068",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:059acb072a4459178782d32d709f560380083d727a9aceab26f79ddabff383a0"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Shippio suspended its freight platform on November 2 after unauthorized access exposed customer information and altered parts of the system."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--535b6361-72cd-5afc-84fb-50e233a8f5bb",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "clm:2e962504-98d2-4b11-9d3c-1b2e5d4301ee",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Shippio",
          "url": "https://www.shippio.io/news/20261104/",
          "external_id": "cit:952fccbe-7300-450d-b3be-6ba46aabc277",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:059acb072a4459178782d32d709f560380083d727a9aceab26f79ddabff383a0"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Shippio blocked known access paths, rotated credentials, removed unauthorized accounts and files, and restored altered settings. The November 4 notice gave no restart date; regulatory consultation and individual notifications continued."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--563cc6b0-aef6-5214-8d82-2079e7d4b86c",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "clm:47f44fd6-0efe-4122-b1ce-c937d06fcecb",
      "confidence": 100,
      "external_references": [],
      "x_ally_claim_object": {
        "kind": "iri",
        "value": "https://attack.mitre.org/techniques/T1136/"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--592d208e-1b53-54e5-805f-9c8dfcc68127",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "clm:ff69f38e-197b-4437-aa5e-5a20e5a610b4",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Shippio",
          "url": "https://www.shippio.io/news/20261104/",
          "external_id": "cit:6c335942-f7c7-4d0e-a085-6c6c823117ee",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:059acb072a4459178782d32d709f560380083d727a9aceab26f79ddabff383a0"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Access to an internal business tool began October 30. Credentials stored there were used against the platform between about November 1 at 19:30 and November 2 at 17:00 JST."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--61cc2ac8-c49f-561c-888d-a01486f4e634",
      "created": "2026-11-06T14:02:24.917570+00:00",
      "modified": "2026-11-06T14:02:24.917570+00:00",
      "x_ally_original_id": "clm:761e1044-d7f8-4c01-a62d-b958896a5776",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Shippio",
          "url": "https://www.shippio.io/news/20261104/",
          "external_id": "cit:3e9a7dd2-45f6-4c7b-943f-10781431c0d2",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:684e33e95fc0d8d60278daeefcecf631121cea96de74b1d501e5eb5700a30919"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "In its November 6 clarification, Shippio said it stopped the compromised internal tool around 11:40 JST on November 2 and finished blocking related unauthorized platform access at 17:38 JST that day."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--c5255e54-b718-558c-85a1-332cb0a1b261",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "clm:a7876461-c5d1-487e-b188-031194e433cd",
      "confidence": 100,
      "external_references": [],
      "x_ally_claim_object": {
        "kind": "iri",
        "value": "https://attack.mitre.org/techniques/T1078/"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--d6c7742b-a5ec-5622-8659-b521b88f4f8c",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "clm:a720fdc8-fa18-4afc-9fe1-6f49b9353714",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Shippio",
          "url": "https://www.shippio.io/news/20261104/",
          "external_id": "cit:27927b15-a4d8-417e-9f2d-b987b03f635b",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:059acb072a4459178782d32d709f560380083d727a9aceab26f79ddabff383a0"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-11-02"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--e0885aa6-9689-5946-86ac-226318d96140",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "clm:eb5092a9-2863-470b-997b-1a00fbadb789",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Shippio",
          "url": "https://www.shippio.io/news/20261104/",
          "external_id": "cit:3ba5ecff-f95f-4216-98b6-411c071a4a80",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:059acb072a4459178782d32d709f560380083d727a9aceab26f79ddabff383a0"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Unauthorized accounts and API credentials were created across about 1,100 teams, and malicious files were uploaded."
      }
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--27a853b9-4115-5961-8ac4-c162cf80ba00",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "evt:11b52575-5265-4639-acdd-f2a7d3b61df2",
      "name": "Incident notice published"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--6f831ac9-b678-568d-80d6-5c6ad3bacb22",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "evt:47e8cd82-b5d2-482a-8643-caac2b189f4e",
      "name": "Platform suspended at 10:40 JST"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--952cc490-6bcd-5c1d-8c7d-7305634afa68",
      "created": "2026-11-05T14:19:24.167580+00:00",
      "modified": "2026-11-05T14:19:24.167580+00:00",
      "x_ally_original_id": "evt:2f29bd68-ddd7-4df3-af91-4a4cde31c06c",
      "name": "Internal-tool access began"
    }
  ]
}