{
  "type": "bundle",
  "id": "bundle--49800375-21f1-5f0f-8095-1668a0eb1232",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--bf9a735e-c359-517c-8e3d-f1d9874ed52a",
      "created": "2026-08-09T09:05:06Z",
      "modified": "2026-08-09T09:05:06Z",
      "x_ally_original_id": "org:36c35a3a-6d3b-4145-ac15-74bf29b90a40",
      "name": "SoundCloud",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--292a1a46-acf9-503c-8318-fd2f1481d832",
      "created": "2026-08-09T09:05:06Z",
      "modified": "2026-08-09T09:05:06Z",
      "x_ally_original_id": "brh:7c0c00aa-ce16-485b-bf03-d3b61f99e053",
      "name": "SoundCloud ancillary-dashboard data breach"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--70d387d1-1c4b-5b62-825c-0b63173aa2c4",
      "created": "2026-08-09T09:05:06Z",
      "modified": "2026-08-09T09:05:06Z",
      "x_ally_original_id": "inc:709edcf0-504f-4604-9baa-7436b0634532",
      "name": "December 2025 SoundCloud ancillary-dashboard incident"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--135e773d-f267-5fc9-82df-c8d0a5400d3b",
      "created": "2026-08-09T09:05:06Z",
      "modified": "2026-08-09T09:05:06Z",
      "x_ally_original_id": "clm:eb30467c-4fc3-4a96-bed3-4dc5dc7f8bee",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--bebb3793-ee65-5fe0-80d8-59e8397c08e5",
      "target_ref": "x-ally-data-category--8d61e479-4403-5ccf-8301-fc8eecd71836",
      "confidence": 95,
      "external_references": [
        {
          "source_name": "Have I Been Pwned",
          "url": "https://haveibeenpwned.com/api/v3/breach/SoundCloud",
          "external_id": "cit:bddff7fe-31df-47ce-9749-414faacaca9e",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:01645e6d76a6610720bc54b0235d5dc5235b47e1e570cedeba96e31ad97f4e06"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--2e1aa114-0a6e-5fc4-86fe-94f160d91ad0",
      "created": "2026-08-09T09:05:06Z",
      "modified": "2026-08-09T09:05:06Z",
      "x_ally_original_id": "clm:a467f019-b9a6-4fcb-97d6-07a4665dbd91",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--bebb3793-ee65-5fe0-80d8-59e8397c08e5",
      "target_ref": "x-ally-data-category--81e143ab-ba3d-500b-88fa-a41aa55dc48e",
      "confidence": 95,
      "external_references": [
        {
          "source_name": "Have I Been Pwned",
          "url": "https://haveibeenpwned.com/api/v3/breach/SoundCloud",
          "external_id": "cit:c61fa41b-145c-47e3-9ec4-86c43eab88a8",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:01645e6d76a6610720bc54b0235d5dc5235b47e1e570cedeba96e31ad97f4e06"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--3f58ab7a-742f-58e9-8b26-2a16fc8de9a6",
      "created": "2026-08-09T09:05:06Z",
      "modified": "2026-08-09T09:05:06Z",
      "x_ally_original_id": "clm:c051e64f-ac00-4f04-b567-f652a9712a5d",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--bebb3793-ee65-5fe0-80d8-59e8397c08e5",
      "target_ref": "x-ally-data-category--e88abdf1-a199-5c86-80c5-317bfbf871a1",
      "confidence": 90,
      "external_references": [
        {
          "source_name": "Have I Been Pwned",
          "url": "https://haveibeenpwned.com/api/v3/breach/SoundCloud",
          "external_id": "cit:19352936-6959-49b2-ad2a-75b064e3ff32",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:01645e6d76a6610720bc54b0235d5dc5235b47e1e570cedeba96e31ad97f4e06"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--589a923e-893a-597b-8fc4-412f43620706",
      "created": "2026-08-09T09:05:06Z",
      "modified": "2026-08-09T09:05:06Z",
      "x_ally_original_id": "clm:0b17aa46-fe33-47c0-b996-f805f89ab1e3",
      "relationship_type": "resulted-in",
      "source_ref": "incident--70d387d1-1c4b-5b62-825c-0b63173aa2c4",
      "target_ref": "x-ally-data-exposure--bebb3793-ee65-5fe0-80d8-59e8397c08e5",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "SoundCloud",
          "url": "https://soundcloud.com/playbook-articles/protecting-our-users-and-our-service",
          "external_id": "cit:360a8eb7-7af8-44eb-8a6e-3a3670f266e9",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:9a7903b2277708e6aa935253113fece6322e415a6043718bd1db2f1c0fe345d5"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--5ff29d25-f0b2-536b-875a-aa6f475e8f60",
      "created": "2026-08-09T09:05:06Z",
      "modified": "2026-08-09T09:05:06Z",
      "x_ally_original_id": "clm:8f06eb39-317a-4cd2-b430-894d5fe25312",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--bebb3793-ee65-5fe0-80d8-59e8397c08e5",
      "target_ref": "x-ally-data-category--c79f34f3-405d-57d2-8409-98eff3898231",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "SoundCloud",
          "url": "https://soundcloud.com/playbook-articles/protecting-our-users-and-our-service",
          "external_id": "cit:9eafdc38-7b2e-4df2-a54e-8111144b23d4",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:9a7903b2277708e6aa935253113fece6322e415a6043718bd1db2f1c0fe345d5"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--d8a52d4d-ecda-5b69-82b4-fc788d821c83",
      "created": "2026-08-09T09:05:06Z",
      "modified": "2026-08-09T09:05:06Z",
      "x_ally_original_id": "clm:bbd797bd-6e88-4e9c-bf53-dd2dc79ef29a",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--bebb3793-ee65-5fe0-80d8-59e8397c08e5",
      "target_ref": "x-ally-data-category--a2b7dd9d-0c02-5710-88ed-ea507d0ffa07",
      "confidence": 95,
      "external_references": [
        {
          "source_name": "Have I Been Pwned",
          "url": "https://haveibeenpwned.com/api/v3/breach/SoundCloud",
          "external_id": "cit:6ef2e22d-e2ca-461e-898d-bf1ebcfb98b7",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:01645e6d76a6610720bc54b0235d5dc5235b47e1e570cedeba96e31ad97f4e06"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--db059af8-a223-5fcb-8a91-2b7cbdb3f95d",
      "created": "2026-08-09T09:05:06Z",
      "modified": "2026-08-09T09:05:06Z",
      "x_ally_original_id": "clm:1e1927fa-7bcd-4316-90a4-78af6e2efe9a",
      "relationship_type": "affected-organization",
      "source_ref": "incident--70d387d1-1c4b-5b62-825c-0b63173aa2c4",
      "target_ref": "identity--bf9a735e-c359-517c-8e3d-f1d9874ed52a",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "SoundCloud",
          "url": "https://soundcloud.com/playbook-articles/protecting-our-users-and-our-service",
          "external_id": "cit:43d5fe1b-7ef5-4e7a-8295-b06398a40578",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:9a7903b2277708e6aa935253113fece6322e415a6043718bd1db2f1c0fe345d5"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--22a41e25-5eff-5a33-8974-206d73ff3504",
      "created": "2026-08-09T09:05:06Z",
      "modified": "2026-08-09T09:05:06Z",
      "x_ally_original_id": "clm:c279ab61-aa78-450f-a7d4-7be5ad779835",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "SoundCloud",
          "url": "https://soundcloud.com/playbook-articles/protecting-our-users-and-our-service",
          "external_id": "cit:aa978304-9874-4ea9-9435-ec20d31d295a",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:9a7903b2277708e6aa935253113fece6322e415a6043718bd1db2f1c0fe345d5"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "SoundCloud said it found no evidence supporting the group's claims that sensitive data had been taken and was working with authorities."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--31c64233-4df9-5a06-809e-22968364b21e",
      "created": "2026-08-09T09:05:06Z",
      "modified": "2026-08-09T09:05:06Z",
      "x_ally_original_id": "clm:8f23c3bd-35ad-48e2-932f-9389e8cbb733",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "SoundCloud",
          "url": "https://soundcloud.com/playbook-articles/protecting-our-users-and-our-service",
          "external_id": "cit:2bf02a0b-9ce6-4a1b-8ee0-75d66b51650e",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:9a7903b2277708e6aa935253113fece6322e415a6043718bd1db2f1c0fe345d5"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "On January 13, SoundCloud said a group claiming responsibility had made demands and used email flooding to harass users, employees, and partners."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--385ec8ff-6a92-5dfa-8c68-61c1f05acc13",
      "created": "2026-08-09T09:05:06Z",
      "modified": "2026-08-09T09:05:06Z",
      "x_ally_original_id": "clm:3a0eb195-ec37-4832-bd42-cc64e6e66649",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "SoundCloud",
          "url": "https://soundcloud.com/playbook-articles/protecting-our-users-and-our-service",
          "external_id": "cit:5b95599e-6e80-46a1-a8d3-9f58686aaeb6",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:9a7903b2277708e6aa935253113fece6322e415a6043718bd1db2f1c0fe345d5"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "SoundCloud said the limited data affected approximately 20 percent of its users and contained no financial or password data."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--3932ac25-ea08-5b3a-8002-6b03d08556ce",
      "created": "2026-08-09T09:05:06Z",
      "modified": "2026-08-09T09:05:06Z",
      "x_ally_original_id": "clm:ad0c5d18-062f-4432-bcb1-64b7de6d5999",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Have I Been Pwned",
          "url": "https://haveibeenpwned.com/api/v3/breach/SoundCloud",
          "external_id": "cit:9daa4912-3d0b-4d8f-baad-8c17fbc8670d",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:01645e6d76a6610720bc54b0235d5dc5235b47e1e570cedeba96e31ad97f4e06"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "integer",
        "value": 29815722,
        "unit": "record"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--4d69b706-6878-5bee-86c5-9d0618fa5929",
      "created": "2026-08-09T09:05:06Z",
      "modified": "2026-08-09T09:05:06Z",
      "x_ally_original_id": "clm:926fd925-459c-4426-bf83-f98f7ccd1b4c",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "SoundCloud",
          "url": "https://soundcloud.com/playbook-articles/protecting-our-users-and-our-service",
          "external_id": "cit:62f4d091-8bdc-4efc-a769-72022db25f86",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:9a7903b2277708e6aa935253113fece6322e415a6043718bd1db2f1c0fe345d5"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "After containment, SoundCloud experienced denial-of-service attacks, two of which temporarily disabled the platform's web availability."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--6c814bd1-d0b8-5024-861c-6e870217ee37",
      "created": "2026-08-09T09:05:06Z",
      "modified": "2026-08-09T09:05:06Z",
      "x_ally_original_id": "clm:8ac1b656-9f1e-419f-b789-b74ce8e7441a",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "SoundCloud",
          "url": "https://soundcloud.com/playbook-articles/protecting-our-users-and-our-service",
          "external_id": "cit:3e2fb662-232a-427e-9032-b74baf2e083d",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:9a7903b2277708e6aa935253113fece6322e415a6043718bd1db2f1c0fe345d5"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "SoundCloud said it strengthened perimeter security, DDoS detection and mitigation, monitoring and threat detection, identity and access controls, and auditing of related systems and services."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--7e1dce8c-5554-5192-8fc7-6557fcbd1224",
      "created": "2026-08-09T09:05:06Z",
      "modified": "2026-08-09T09:05:06Z",
      "x_ally_original_id": "clm:cef01c2e-a81f-49f0-9cd5-0991d9b638ed",
      "confidence": 85,
      "external_references": [
        {
          "source_name": "Have I Been Pwned",
          "url": "https://haveibeenpwned.com/api/v3/breach/SoundCloud",
          "external_id": "cit:7bf5de86-278d-45d0-8e24-7e121daed0c9",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:01645e6d76a6610720bc54b0235d5dc5235b47e1e570cedeba96e31ad97f4e06"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2025-12-15"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--c6ba03dd-f1d2-5a0f-8de0-3a0a174f6e6d",
      "created": "2026-08-09T09:05:06Z",
      "modified": "2026-08-09T09:05:06Z",
      "x_ally_original_id": "clm:da365399-936a-4ef3-b32c-f02a93f8b5b3",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "SoundCloud",
          "url": "https://soundcloud.com/playbook-articles/protecting-our-users-and-our-service",
          "external_id": "cit:47037c22-7ba7-4f0b-9ef6-f42f0308c5df",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:9a7903b2277708e6aa935253113fece6322e415a6043718bd1db2f1c0fe345d5"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "On February 24, SoundCloud said its third-party investigation was complete and again concluded that no sensitive data was taken."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--df8287b0-e0c0-5ad1-84c2-4e033a9090a4",
      "created": "2026-08-09T09:05:06Z",
      "modified": "2026-08-09T09:05:06Z",
      "x_ally_original_id": "clm:6aeddee0-b663-4beb-bafc-3008087725b1",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "SoundCloud",
          "url": "https://soundcloud.com/playbook-articles/protecting-our-users-and-our-service",
          "external_id": "cit:fddfb2a4-25a6-4305-8d6b-2f470fe1ca94",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:9a7903b2277708e6aa935253113fece6322e415a6043718bd1db2f1c0fe345d5"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2025-12-15"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--ffe1f4a6-ff11-5711-8455-db87b73c51bc",
      "created": "2026-08-09T09:05:06Z",
      "modified": "2026-08-09T09:05:06Z",
      "x_ally_original_id": "clm:b52ea780-af99-4aad-bbc4-6cdd04b48a93",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "SoundCloud",
          "url": "https://soundcloud.com/playbook-articles/protecting-our-users-and-our-service",
          "external_id": "cit:be7cda24-2eb5-4cbc-b080-0a09c36ae0f1",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:9a7903b2277708e6aa935253113fece6322e415a6043718bd1db2f1c0fe345d5"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "SoundCloud detected unauthorized activity in an ancillary service dashboard, activated its incident-response protocols, and contained the activity."
      }
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--81e143ab-ba3d-500b-88fa-a41aa55dc48e",
      "created": "2026-08-09T00:47:00Z",
      "modified": "2026-08-09T00:47:00Z",
      "x_ally_original_id": "dat:6821059d-a3c0-44b5-bfc2-1e099e79a4b2",
      "name": "Photographic images"
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--8d61e479-4403-5ccf-8301-fc8eecd71836",
      "created": "2026-08-09T01:42:42Z",
      "modified": "2026-08-09T01:42:42Z",
      "x_ally_original_id": "dat:6f122c9e-026f-4348-b335-0d3f85f51dbc",
      "name": "Usernames and account identifiers"
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--a2b7dd9d-0c02-5710-88ed-ea507d0ffa07",
      "created": "2026-08-08T23:12:00Z",
      "modified": "2026-08-08T23:12:00Z",
      "x_ally_original_id": "dat:559cf3f5-80c7-45ba-a930-ff0bfa8d17b0",
      "name": "Names"
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--c79f34f3-405d-57d2-8409-98eff3898231",
      "created": "2026-08-08T23:12:00Z",
      "modified": "2026-08-08T23:12:00Z",
      "x_ally_original_id": "dat:5abcee7e-4a37-494a-b6ba-87ff46149be9",
      "name": "Contact information"
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--e88abdf1-a199-5c86-80c5-317bfbf871a1",
      "created": "2026-08-09T04:16:47Z",
      "modified": "2026-08-09T04:16:47Z",
      "x_ally_original_id": "dat:92d8b8c7-0cde-4440-ae01-6c6fef5524d9",
      "name": "Geographic location information"
    },
    {
      "type": "x-ally-data-exposure",
      "spec_version": "2.1",
      "id": "x-ally-data-exposure--bebb3793-ee65-5fe0-80d8-59e8397c08e5",
      "created": "2026-08-09T09:05:06Z",
      "modified": "2026-08-09T09:05:06Z",
      "x_ally_original_id": "exp:972e3e5d-8b05-42c8-ba83-28b5a9960114",
      "name": "SoundCloud email and public-profile data exposure"
    }
  ]
}