{
  "type": "bundle",
  "id": "bundle--c3789f22-453c-55d8-8908-9c2e1aef36cb",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--5d91a331-d771-5d60-8630-f4d8e99f8645",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "org:484f2d1d-cec9-42b5-91fd-ae30f8a784ed",
      "name": "Trigger.dev",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--7797c3ee-1d7f-53ef-8966-1ff35255d591",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "inc:206dbb79-351a-4885-928e-379bbe5013b7",
      "name": "Trigger.dev environment-variable incident"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--8db76656-67c3-5475-8ca1-deaaa49dc342",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "brh:6a0b5d20-97fb-4414-bdc5-9f1c27abbdf2",
      "name": "Trigger.dev environment-variable incident"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--656613b8-d27e-5b20-8421-a6195a6ed5de",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:7f03e1b6-1a6e-4573-b01e-2a182dcddec0",
      "relationship_type": "resulted-in",
      "source_ref": "incident--7797c3ee-1d7f-53ef-8966-1ff35255d591",
      "target_ref": "x-ally-event--f9836255-8468-5156-824e-e94b675bc2bb",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Trigger.dev",
          "url": "https://trigger.dev/blog/security-incident-nov-2026",
          "external_id": "cit:c14d2e24-21e4-445f-9d13-0edd1cda8806",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:aa54e4e849b51c41c1195573819eb85d9a29fb8c1f39daba2c823f3f225d0509"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--d28fdcba-eb88-5a14-8e2c-43787bfbaaa9",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:0b8a5395-b11b-4cae-8404-a9e904900437",
      "relationship_type": "affected-organization",
      "source_ref": "incident--7797c3ee-1d7f-53ef-8966-1ff35255d591",
      "target_ref": "identity--5d91a331-d771-5d60-8630-f4d8e99f8645",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Trigger.dev",
          "url": "https://trigger.dev/blog/security-incident-nov-2026",
          "external_id": "cit:7b6a480a-9f9c-4d91-9a49-076b8ed53ed5",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:aa54e4e849b51c41c1195573819eb85d9a29fb8c1f39daba2c823f3f225d0509"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--347023ff-882c-593e-8170-375692226209",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:e14cb40c-4096-4ece-8e17-356018e8f330",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Trigger.dev",
          "url": "https://trigger.dev/blog/security-incident-nov-2026",
          "external_id": "cit:7f5fca18-549a-4839-b550-695de014fa78",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:aa54e4e849b51c41c1195573819eb85d9a29fb8c1f39daba2c823f3f225d0509"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The company did not publish an affected-organization count or identify which variables were accessed."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--54dfe30e-ee0c-5688-8fbf-fdc48e1fced5",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:3d33ed85-9b01-4ac8-b3cf-d056b3fa07cf",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Trigger.dev",
          "url": "https://trigger.dev/blog/security-incident-nov-2026",
          "external_id": "cit:90c4594f-9cb1-4ac2-872b-841af6b1da7c",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:aa54e4e849b51c41c1195573819eb85d9a29fb8c1f39daba2c823f3f225d0509"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Trigger.dev said it blocked the exploit. Its initial disclosure does not identify the vulnerability, entry method or attacker."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--58b453d6-cb6b-57a3-8a26-6b3db247cf79",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:c88570c9-caed-4538-adfb-0ff97dbeb804",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Trigger.dev",
          "url": "https://trigger.dev/blog/security-incident-nov-2026",
          "external_id": "cit:a9a6d572-abe3-40b7-9669-c63e9e665511",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:aa54e4e849b51c41c1195573819eb85d9a29fb8c1f39daba2c823f3f225d0509"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-11-01"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--869a5e63-dd22-537e-8202-2eb5ba7970a1",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:bbac587b-04b1-4966-949a-d3939108571e",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Trigger.dev",
          "url": "https://trigger.dev/blog/security-incident-nov-2026",
          "external_id": "cit:9f2337fb-9c63-4fd6-9b9a-9c4d8259774b",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:aa54e4e849b51c41c1195573819eb85d9a29fb8c1f39daba2c823f3f225d0509"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-11-01"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--c90062d2-668e-50fa-83b0-9beb5b8f4d04",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:03457d33-410e-4bd2-80b3-dc17a94d4216",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Trigger.dev",
          "url": "https://trigger.dev/blog/security-incident-nov-2026",
          "external_id": "cit:e9dc1e25-fad5-40ca-a2e6-36e5063e1c50",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:aa54e4e849b51c41c1195573819eb85d9a29fb8c1f39daba2c823f3f225d0509"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Trigger.dev disclosed unauthorized access to environment variables belonging to a subset of customer organizations on November 1, 2026."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--e1918e32-7bb2-5b6e-8bb8-c36d4e9f934c",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:cfa6ca21-f830-4fb2-beb1-bf297cf79984",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Trigger.dev",
          "url": "https://trigger.dev/blog/security-incident-nov-2026",
          "external_id": "cit:5ab8b388-b2ce-4495-83bd-f0f221eceec3",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:aa54e4e849b51c41c1195573819eb85d9a29fb8c1f39daba2c823f3f225d0509"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Trigger.dev emailed affected account owners with mitigation steps and said further details would follow."
      }
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--f9836255-8468-5156-824e-e94b675bc2bb",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "evt:c2ebe3c1-c8af-471a-b9e5-79203aee6480",
      "name": "Incident disclosed and exploit blocked"
    }
  ]
}