{
  "type": "bundle",
  "id": "bundle--5aa79a6d-fe55-566c-850a-5163b55ca1d2",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--a8b172ad-7663-52cc-8d3a-19a8ab975c1e",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "org:8e7c4e8c-e617-522a-a3e5-b53da0b9c895",
      "name": "SolarWinds",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--1618be64-3224-511c-88cc-f9bd25095633",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "inc:d985e40e-4225-590a-af52-7c8e432a21df",
      "name": "SolarWinds Orion supply-chain compromise"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--205be8e4-faf9-5175-8ee2-3823ee3b47cd",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "brh:98915250-801d-54c3-a9f5-58938198d238",
      "name": "SolarWinds Orion supply-chain compromise"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--611074e1-45ec-518c-8d4b-f18cf575920f",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "clm:07781b85-dd9d-5720-bb9e-cd22b04eeeb1",
      "relationship_type": "affected-organization",
      "source_ref": "incident--1618be64-3224-511c-88cc-f9bd25095633",
      "target_ref": "identity--a8b172ad-7663-52cc-8d3a-19a8ab975c1e",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "CISA",
          "url": "https://www.cisa.gov/news-events/alerts/2020/12/13/active-exploitation-solarwinds-software",
          "external_id": "cit:32d12672-9d3e-5600-8807-c27f186ca378",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:dbe18d590bd217b59f4efa8af16bf8b20205978f4ff870979775ccb78824bf8d"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--a41931e6-a62e-58d6-870b-e5d67ea61253",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:ba4738b6-9780-5322-a7b4-6cc848ec59e0",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "CISA",
          "url": "https://www.cisa.gov/news-events/alerts/2020/12/13/active-exploitation-solarwinds-software",
          "external_id": "cit:333ec549-80e2-5d70-860c-4ff505178ecf",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:dbe18d590bd217b59f4efa8af16bf8b20205978f4ff870979775ccb78824bf8d"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2020-12-14"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--e87960b1-745f-5f20-83f4-15dd02a96662",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "clm:8cb33567-6d52-58d9-8262-031506e22621",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "CISA",
          "url": "https://www.cisa.gov/news-events/alerts/2020/12/13/active-exploitation-solarwinds-software",
          "external_id": "cit:337831e1-2053-5005-9ea3-3928a2db4f48",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:dbe18d590bd217b59f4efa8af16bf8b20205978f4ff870979775ccb78824bf8d"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The reviewed source documents the solarwinds orion supply-chain compromise involving SolarWinds."
      }
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--9de886b5-7eb1-5a78-82b6-81914f94301c",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "evt:0def5810-b9db-5a81-b2c2-9a8d890ec272",
      "name": "Documented public update"
    }
  ]
}