{
  "type": "bundle",
  "id": "bundle--ae3c1fac-910b-5960-8801-e03a7e71dfdc",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--806761c5-d4e7-5c89-81d2-143c0fadaaed",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "org:7caf7235-29ab-5912-a4b1-09d2e31805bb",
      "name": "Live Nation Entertainment",
      "identity_class": "organization"
    },
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--f02a04b4-85d9-5eb1-8868-ac9706ab267e",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "org:899d6bc3-ffe6-52fb-8889-f8a586446b62",
      "name": "Ticketmaster",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--395075b6-f691-5c92-84d3-e9eadfa015f3",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "inc:1c3f7096-0c77-57e5-be64-86554b6b2472",
      "name": "Ticketmaster / Live Nation security incident"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--584403b4-7d34-5c8d-890a-210cae218ac0",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "brh:2e852c2a-0ac1-5626-937c-b81613229d58",
      "name": "Ticketmaster / Live Nation security incident"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--2b0895e3-c786-56b5-863d-7d4df0508d05",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "clm:17ef2596-e016-559f-a28b-61d1fe29ca3e",
      "relationship_type": "affected-organization",
      "source_ref": "incident--395075b6-f691-5c92-84d3-e9eadfa015f3",
      "target_ref": "identity--f02a04b4-85d9-5eb1-8868-ac9706ab267e",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "U.S. Securities and Exchange Commission",
          "url": "https://www.sec.gov/Archives/edgar/data/1335258/000133525824000081/lyv-20240520.htm",
          "external_id": "cit:cb3003bc-6e52-51e1-9834-89e401bf257d",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:b8204b73f3aac195eefb0ed6dcca697ea684fa9b828bb0a9a7e2913014759cd7"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--f9d0502e-dceb-514f-8bba-8699955fdffe",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "clm:0b0d1b7c-f04a-56cd-aed9-ee6764c89b5f",
      "relationship_type": "affected-organization",
      "source_ref": "incident--395075b6-f691-5c92-84d3-e9eadfa015f3",
      "target_ref": "identity--806761c5-d4e7-5c89-81d2-143c0fadaaed",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "U.S. Securities and Exchange Commission",
          "url": "https://www.sec.gov/Archives/edgar/data/1335258/000133525824000081/lyv-20240520.htm",
          "external_id": "cit:a82d2342-1ae5-5c2e-8f93-3bbbe66ee4c9",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:b8204b73f3aac195eefb0ed6dcca697ea684fa9b828bb0a9a7e2913014759cd7"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--460770fc-967a-55ed-8831-620c0a53610f",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "clm:04cf4b23-2d16-5760-9cbc-b83005724882",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "U.S. Securities and Exchange Commission",
          "url": "https://www.sec.gov/Archives/edgar/data/1335258/000133525824000081/lyv-20240520.htm",
          "external_id": "cit:ea27d571-0e2d-5937-b6e0-de5d744aa7cd",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:b8204b73f3aac195eefb0ed6dcca697ea684fa9b828bb0a9a7e2913014759cd7"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The reviewed source documents the ticketmaster / live nation security incident involving Ticketmaster, Live Nation Entertainment."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--dffa892d-0fea-5d90-83a6-0635ebe96bc1",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:8ecc1ec3-0baa-5a24-9447-59e5912da176",
      "confidence": 82,
      "external_references": [
        {
          "source_name": "U.S. Securities and Exchange Commission",
          "url": "https://www.sec.gov/Archives/edgar/data/1335258/000133525824000081/lyv-20240520.htm",
          "external_id": "cit:3db6412d-4ed0-536f-ba41-3eb0fa87bdcd",
          "description": "+--------------------------------------------------------------------------------------+--------------------------------------------------------------------------------------+--------------------------------------------------------------------------------------+---+---+---+ | | | | | | | +--------------------------------------------------------------------------------------+--------------------------------------------------------------------------------------+--------------------------------------------------------------------------------------+---+---+---+ | If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. | ¨ | +------------------------------------------------------------------------------------------------------------------------------",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:b8204b73f3aac195eefb0ed6dcca697ea684fa9b828bb0a9a7e2913014759cd7"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Stolen credentials were used against a Snowflake customer account that did not enforce MFA."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--e9dd92c4-f92a-55fc-8a8b-f1203a2ea8ad",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:2419d3a3-b260-5237-8f8a-2d8c37b51109",
      "confidence": 90,
      "external_references": [],
      "x_ally_claim_object": {
        "kind": "iri",
        "value": "https://attack.mitre.org/techniques/T1078/"
      }
    }
  ]
}