{
  "type": "bundle",
  "id": "bundle--aab693f0-f589-56a1-8d92-a9b28a0bd6e3",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--3ba5fad9-36c0-5735-8926-fbd17cc754d5",
      "created": "2026-11-12T14:14:42.132958+00:00",
      "modified": "2026-11-12T14:14:42.132958+00:00",
      "x_ally_original_id": "org:4700ec43-82ee-4be2-97c8-08f64b2dc99a",
      "name": "Dentsu Digital",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--2fd65460-01e1-5073-8594-14526b0885e5",
      "created": "2026-11-12T14:14:42.132958+00:00",
      "modified": "2026-11-12T14:14:42.132958+00:00",
      "x_ally_original_id": "inc:b440ce79-ccad-4257-94e0-ead3f640f25f",
      "name": "TONARIWA management-account compromise"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--f7d4e241-cef1-511e-8622-103454035bf7",
      "created": "2026-11-12T14:14:42.132958+00:00",
      "modified": "2026-11-12T14:14:42.132958+00:00",
      "x_ally_original_id": "brh:c0c3f61c-f7db-496b-b786-814792eb4352",
      "name": "TONARIWA management-account compromise"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--08fb21ef-f168-58b3-8edc-b807484604bc",
      "created": "2026-11-12T14:14:42.132958+00:00",
      "modified": "2026-11-12T14:14:42.132958+00:00",
      "x_ally_original_id": "clm:82be26f6-6d7c-4daf-a5c9-f27094fc724e",
      "relationship_type": "resulted-in",
      "source_ref": "incident--2fd65460-01e1-5073-8594-14526b0885e5",
      "target_ref": "x-ally-event--d7ef4a48-8db5-55c5-8027-2107d6dc22ed",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Dentsu Digital",
          "url": "https://www.dentsudigital.co.jp/news/updates/services/2026-1111-001111",
          "external_id": "cit:aa6baf7f-a8f8-45cd-9d55-3fcf833e2b27",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:87d3c0aebc361fb371ab514e61930aec8ab5262494d055c9690ac2263c64ff2f"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--8bab8540-e03b-5ce6-8d94-ae3c40985796",
      "created": "2026-11-12T14:14:42.132958+00:00",
      "modified": "2026-11-12T14:14:42.132958+00:00",
      "x_ally_original_id": "clm:698cc83b-1149-4085-9126-04036a802438",
      "relationship_type": "resulted-in",
      "source_ref": "incident--2fd65460-01e1-5073-8594-14526b0885e5",
      "target_ref": "x-ally-event--7bf86e88-7284-5e5f-8e59-57429c8618fe",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Dentsu Digital",
          "url": "https://www.dentsudigital.co.jp/news/updates/services/2026-1111-001111",
          "external_id": "cit:418c2fdc-825b-498e-963f-c5199d095875",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:87d3c0aebc361fb371ab514e61930aec8ab5262494d055c9690ac2263c64ff2f"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--d2bb44d4-e298-57a0-8d31-ca252d71173d",
      "created": "2026-11-12T14:14:42.132958+00:00",
      "modified": "2026-11-12T14:14:42.132958+00:00",
      "x_ally_original_id": "clm:481d42f4-35df-4a84-b12c-f905e8a89538",
      "relationship_type": "resulted-in",
      "source_ref": "incident--2fd65460-01e1-5073-8594-14526b0885e5",
      "target_ref": "x-ally-event--e3c16271-6aec-5781-8cf0-8049a0687419",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Dentsu Digital",
          "url": "https://www.dentsudigital.co.jp/news/updates/services/2026-1112-001112",
          "external_id": "cit:1077fc2c-0e5f-4af0-b065-8f3bb0aafd76",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:7efad41508d25a907c97ec8b7cc8f5956c18946361d21ec1fae1500c59f69978"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--ef937f12-7818-59b5-87e7-a333fe1b2fc2",
      "created": "2026-11-12T14:14:42.132958+00:00",
      "modified": "2026-11-12T14:14:42.132958+00:00",
      "x_ally_original_id": "clm:e0d11c83-d887-4c77-bfab-9b22aee32864",
      "relationship_type": "affected-organization",
      "source_ref": "incident--2fd65460-01e1-5073-8594-14526b0885e5",
      "target_ref": "identity--3ba5fad9-36c0-5735-8926-fbd17cc754d5",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Dentsu Digital",
          "url": "https://www.dentsudigital.co.jp/news/updates/services/2026-1111-001111",
          "external_id": "cit:8a84b70d-a537-43ef-8ed4-3887ba680d5d",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:87d3c0aebc361fb371ab514e61930aec8ab5262494d055c9690ac2263c64ff2f"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--4cd7706e-0f83-5aeb-87fc-b2eb1e088a9f",
      "created": "2026-11-12T14:14:42.132958+00:00",
      "modified": "2026-11-12T14:14:42.132958+00:00",
      "x_ally_original_id": "clm:9bd36ab7-a20d-468c-a88c-797cd4940bd4",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Dentsu Digital",
          "url": "https://www.dentsudigital.co.jp/news/updates/services/2026-1112-001112",
          "external_id": "cit:c4e63d9f-fabf-41a6-9cfe-e8015ee5cdff",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:7efad41508d25a907c97ec8b7cc8f5956c18946361d21ec1fae1500c59f69978"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Service restart remained undecided. Detailed investigation, prevention measures and independent safety checks could take months, while alternative environments or successor-system migration were being considered."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--69e70e1f-d27f-516a-86d8-77e454429fc4",
      "created": "2026-11-12T14:14:42.132958+00:00",
      "modified": "2026-11-12T14:14:42.132958+00:00",
      "x_ally_original_id": "clm:70a8d50c-6773-4cd5-adcc-ecbf5483ac01",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Dentsu Digital",
          "url": "https://www.dentsudigital.co.jp/news/updates/services/2026-1112-001112",
          "external_id": "cit:3461ec60-2660-40a6-aa12-1ce06256b13a",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:7efad41508d25a907c97ec8b7cc8f5956c18946361d21ec1fae1500c59f69978"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-11-12"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--6e5dad87-61b3-5cb2-8d4d-f1803aa84f40",
      "created": "2026-11-12T14:14:42.132958+00:00",
      "modified": "2026-11-12T14:14:42.132958+00:00",
      "x_ally_original_id": "clm:d943d3e1-cf5c-4c14-a41f-4db857bdb86b",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Dentsu Digital",
          "url": "https://www.dentsudigital.co.jp/news/updates/services/2026-1112-001112",
          "external_id": "cit:371435de-70cc-4e86-aecf-7d4c90be9f09",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:7efad41508d25a907c97ec8b7cc8f5956c18946361d21ec1fae1500c59f69978"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Affected categories included end-user names, birth dates and contact information, plus TONARIWA management-account information such as LINE integration access tokens. Payment-card and bank-account data were excluded; misuse had not been confirmed."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--760e8a48-62f9-54c5-89e1-29b83105b58b",
      "created": "2026-11-12T14:14:42.132958+00:00",
      "modified": "2026-11-12T14:14:42.132958+00:00",
      "x_ally_original_id": "clm:5417d76f-7c15-4a52-aea8-c999c7d3e328",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Dentsu Digital",
          "url": "https://www.dentsudigital.co.jp/news/updates/services/2026-1111-001111",
          "external_id": "cit:65ccd1c2-7b91-4a7d-8423-0d2daf880c0d",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:87d3c0aebc361fb371ab514e61930aec8ab5262494d055c9690ac2263c64ff2f"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-11-11"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--ac9ddd65-60c3-5e2d-8fb1-9ded4d9f1642",
      "created": "2026-11-12T14:14:42.132958+00:00",
      "modified": "2026-11-12T14:14:42.132958+00:00",
      "x_ally_original_id": "clm:f0f29adf-4eca-434c-accf-76a527275c35",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Dentsu Digital",
          "url": "https://www.dentsudigital.co.jp/news/updates/services/2026-1112-001112",
          "external_id": "cit:2f403e8a-5b2a-47d8-a6c1-00ef80d560de",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:7efad41508d25a907c97ec8b7cc8f5956c18946361d21ec1fae1500c59f69978"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The November 12 investigation found logs showing external data removal and confirmed personal-information leakage involving two client companies. Other clients and affected-record counts were still being assessed."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--afbae17c-21f1-5da8-8341-9b3609f331d0",
      "created": "2026-11-12T14:14:42.132958+00:00",
      "modified": "2026-11-12T14:14:42.132958+00:00",
      "x_ally_original_id": "clm:1d684941-8742-4057-8a51-70d0b2f510c7",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Dentsu Digital",
          "url": "https://www.dentsudigital.co.jp/news/updates/services/2026-1112-001112",
          "external_id": "cit:edb27461-813a-4b5e-b7a2-84e860c7c476",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:7efad41508d25a907c97ec8b7cc8f5956c18946361d21ec1fae1500c59f69978"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Dentsu Digital invalidated compromised credentials, blocked access routes and isolated all servers. It was coordinating client notices, privacy-regulator reports and LINE token invalidation/reissue."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--afd63001-66d0-5949-8ae2-12625ae836cc",
      "created": "2026-11-12T14:14:42.132958+00:00",
      "modified": "2026-11-12T14:14:42.132958+00:00",
      "x_ally_original_id": "clm:706d8c74-6849-4f23-9cab-4264dcb8f710",
      "confidence": 100,
      "external_references": [],
      "x_ally_claim_object": {
        "kind": "iri",
        "value": "https://attack.mitre.org/techniques/T1078/"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--c1cf28e5-1d2b-52b0-8673-6448f17be463",
      "created": "2026-11-12T14:14:42.132958+00:00",
      "modified": "2026-11-12T14:14:42.132958+00:00",
      "x_ally_original_id": "clm:6eabcbc0-f884-4446-8003-bf806d062f87",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Dentsu Digital",
          "url": "https://www.dentsudigital.co.jp/news/updates/services/2026-1111-001111",
          "external_id": "cit:be49955a-01a1-4c9b-9696-2ea2b7aaa5d9",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:87d3c0aebc361fb371ab514e61930aec8ab5262494d055c9690ac2263c64ff2f"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-11-11"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--c3ab1753-029c-5ba4-8447-58e269490922",
      "created": "2026-11-12T14:14:42.132958+00:00",
      "modified": "2026-11-12T14:14:42.132958+00:00",
      "x_ally_original_id": "clm:971de777-66dd-4cb0-a4dd-499b8a472f4e",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Dentsu Digital",
          "url": "https://www.dentsudigital.co.jp/news/updates/services/2026-1111-001111",
          "external_id": "cit:82f521e1-2547-46c7-9257-6bdef529cd73",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:87d3c0aebc361fb371ab514e61930aec8ab5262494d055c9690ac2263c64ff2f"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The November 11 assessment described possible external leakage of personal information."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--c8649188-c3da-5bad-8045-6bdcedcc1d75",
      "created": "2026-11-12T14:14:42.132958+00:00",
      "modified": "2026-11-12T14:14:42.132958+00:00",
      "x_ally_original_id": "clm:06211f96-53cb-45b2-ae90-55518a5caa9a",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Dentsu Digital",
          "url": "https://www.dentsudigital.co.jp/news/updates/services/2026-1111-001111",
          "external_id": "cit:4ada9b27-3b90-45db-bd09-592da2f975d0",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:87d3c0aebc361fb371ab514e61930aec8ab5262494d055c9690ac2263c64ff2f"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-11-10"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--ccf91de5-f424-5824-899e-522d298c8463",
      "created": "2026-11-12T14:14:42.132958+00:00",
      "modified": "2026-11-12T14:14:42.132958+00:00",
      "x_ally_original_id": "clm:4a006e1b-2436-4224-92bc-295112bcb7b5",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Dentsu Digital",
          "url": "https://www.dentsudigital.co.jp/news/updates/services/2026-1111-001111",
          "external_id": "cit:d5f10df1-4ba7-4593-982c-d4ce8cbc8baf",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:87d3c0aebc361fb371ab514e61930aec8ab5262494d055c9690ac2263c64ff2f"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "On November 10 Dentsu Digital confirmed unauthorized access and privilege escalation using leaked credentials for a TONARIWA infrastructure management account, and suspended the platform."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--dfc5c9da-ff21-5003-84dc-3c56ac5e5b2b",
      "created": "2026-11-12T14:14:42.132958+00:00",
      "modified": "2026-11-12T14:14:42.132958+00:00",
      "x_ally_original_id": "clm:78473299-5813-4f9b-bb2a-0de21ae3963b",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Dentsu Digital",
          "url": "https://www.dentsudigital.co.jp/news/updates/services/2026-1111-001111",
          "external_id": "cit:9eb57038-cf43-4f5f-8937-e20a8b16ef2a",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:87d3c0aebc361fb371ab514e61930aec8ab5262494d055c9690ac2263c64ff2f"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-11-10"
      }
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--7bf86e88-7284-5e5f-8e59-57429c8618fe",
      "created": "2026-11-12T14:14:42.132958+00:00",
      "modified": "2026-11-12T14:14:42.132958+00:00",
      "x_ally_original_id": "evt:32c7cc94-5759-45bc-af36-a16fa15389cb",
      "name": "Management-account compromise detected; service suspended"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--d7ef4a48-8db5-55c5-8027-2107d6dc22ed",
      "created": "2026-11-12T14:14:42.132958+00:00",
      "modified": "2026-11-12T14:14:42.132958+00:00",
      "x_ally_original_id": "evt:786405e3-5a45-402c-8b95-66182d861169",
      "name": "Initial possible-exposure notice issued"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--e3c16271-6aec-5781-8cf0-8049a0687419",
      "created": "2026-11-12T14:14:42.132958+00:00",
      "modified": "2026-11-12T14:14:42.132958+00:00",
      "x_ally_original_id": "evt:a4481ad2-a001-46e4-8bb5-870728708e8a",
      "name": "Leakage confirmed for two client companies"
    }
  ]
}