{
  "type": "bundle",
  "id": "bundle--99d102c7-ed03-5012-8ba0-c202336fa41b",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--2598b02f-00c6-5e9d-8fe1-2227d04a8eb8",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "org:d24ed212-550b-5a84-88ee-6274254b354f",
      "name": "National Health Service",
      "identity_class": "organization"
    },
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--da712a26-b273-50d5-8609-b07952562c9b",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "org:cdd0aed6-8794-5f28-9666-67eb38918081",
      "name": "Synnovis",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--64a4a90d-ae0c-5a2c-8a31-a77e59ca9147",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "brh:076b1c30-fecd-5f04-bef4-278a58c2861c",
      "name": "Synnovis / NHS (London hospitals) security incident"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--d83760ef-2ce4-5cb7-85eb-b75648bd1d54",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "inc:1cdee1f4-ecb7-5eb2-bd0a-1234b00c9db6",
      "name": "Synnovis / NHS (London hospitals) security incident"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--c04639c1-8070-5d7e-8bc5-001748117850",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "clm:73ed26f5-6a71-5d65-8cfe-3bc24aab4eb8",
      "relationship_type": "affected-organization",
      "source_ref": "incident--d83760ef-2ce4-5cb7-85eb-b75648bd1d54",
      "target_ref": "identity--2598b02f-00c6-5e9d-8fe1-2227d04a8eb8",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "NHS England",
          "url": "https://www.england.nhs.uk/synnovis-cyber-incident/questions-and-answers/",
          "external_id": "cit:e986f0b2-9046-57fc-bb2f-6c84a1d88126",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:97df0b184f73b0b3d98c9ad8fc87d1f540590f869dd7c734ddcaef57fc17e974"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--d261a533-1cb8-598b-8057-9dfdd5aba450",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "clm:6736369f-c63e-5f1b-9bb1-cf23c527876d",
      "relationship_type": "affected-organization",
      "source_ref": "incident--d83760ef-2ce4-5cb7-85eb-b75648bd1d54",
      "target_ref": "identity--da712a26-b273-50d5-8609-b07952562c9b",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "NHS England",
          "url": "https://www.england.nhs.uk/synnovis-cyber-incident/questions-and-answers/",
          "external_id": "cit:1ee04da9-5510-5bef-b2e6-993c4bd1f9a2",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:97df0b184f73b0b3d98c9ad8fc87d1f540590f869dd7c734ddcaef57fc17e974"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--2fa662d0-a111-5efa-831b-2fe370d22de3",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "clm:4bf56b3d-37df-567e-80f7-0bf13747fb61",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "NHS England",
          "url": "https://www.england.nhs.uk/synnovis-cyber-incident/questions-and-answers/",
          "external_id": "cit:49627c7a-3a6f-5a78-877a-5cf453c59e54",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:97df0b184f73b0b3d98c9ad8fc87d1f540590f869dd7c734ddcaef57fc17e974"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The reviewed source documents the synnovis / nhs (london hospitals) security incident involving Synnovis, National Health Service."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--41fb7c80-ebeb-5146-8d0f-9d05c76bfd60",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:061ddafa-8660-54e4-a490-2b39732c4c3e",
      "confidence": 95,
      "external_references": [
        {
          "source_name": "NHS England",
          "url": "https://www.england.nhs.uk/synnovis-cyber-incident/questions-and-answers/",
          "external_id": "cit:f6ce0355-6551-56b6-a854-fd5b66431d1f",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:97df0b184f73b0b3d98c9ad8fc87d1f540590f869dd7c734ddcaef57fc17e974"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The attack sharply reduced pathology testing capacity in south-east London and forced hospitals to postpone operations and outpatient appointments."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--72c8f5a3-b014-54f1-85e5-1d4ef5e92890",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:ad714a76-2fc4-5bee-b076-13821c825d8d",
      "confidence": 90,
      "external_references": [],
      "x_ally_claim_object": {
        "kind": "iri",
        "value": "https://attack.mitre.org/techniques/T1486/"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--7a7d8e92-12c0-503b-8c01-40eb39131c93",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:6b02de0d-811e-5d0c-9116-a576d4e87597",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "NHS England",
          "url": "https://www.england.nhs.uk/synnovis-cyber-incident/questions-and-answers/",
          "external_id": "cit:3ee5e683-aa38-5a5f-8c16-1e44af2c9928",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:97df0b184f73b0b3d98c9ad8fc87d1f540590f869dd7c734ddcaef57fc17e974"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2024-06-03"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--a81d7435-36e2-535f-8667-0420cc1c05f5",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:0948cdaf-b772-51e8-9e46-3b6e385538a9",
      "confidence": 95,
      "external_references": [
        {
          "source_name": "NHS England",
          "url": "https://www.england.nhs.uk/synnovis-cyber-incident/questions-and-answers/",
          "external_id": "cit:aa8981ac-c03f-5d4c-84b8-59942dd2028d",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:97df0b184f73b0b3d98c9ad8fc87d1f540590f869dd7c734ddcaef57fc17e974"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "NHS England coordinated mutual aid, rerouted tests, and worked with Synnovis while laboratory systems were rebuilt."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--d0809706-735d-5fcc-8903-82bcdfbd71a3",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:7079fd92-e43a-538c-ae4f-4efb780b378e",
      "confidence": 95,
      "external_references": [
        {
          "source_name": "NHS England",
          "url": "https://www.england.nhs.uk/synnovis-cyber-incident/questions-and-answers/",
          "external_id": "cit:b687b458-b1da-5dbe-b3e8-7dd15e334c23",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:97df0b184f73b0b3d98c9ad8fc87d1f540590f869dd7c734ddcaef57fc17e974"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Synnovis was hit by a ransomware attack on June 3, 2024."
      }
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--60a912e6-abd9-5717-8e41-6e70e39160d2",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "evt:e6250bbb-48de-561a-8f6f-337746a18d6f",
      "name": "Documented public update"
    }
  ]
}