{
  "type": "bundle",
  "id": "bundle--c91b2fd8-4141-577e-8dee-a694c591e5a9",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--6192ea6d-4b60-5588-8ecc-746d956e7b14",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "org:7dd493a2-1ff7-5b30-baed-fba5d9a51d06",
      "name": "Uber",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--9084ef38-bdf9-5ef2-82a3-9c523f16810d",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "brh:f04e22f5-1b68-5186-bc16-dc858c6c71fc",
      "name": "Uber security incident"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--f4bcf885-df74-5543-8b1f-fe4f297c0e05",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "inc:c71449e4-71d5-5158-8d4d-91fde786a7c4",
      "name": "Uber security incident"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--aa8c5254-b718-5302-8398-e32441c6b198",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "clm:d3c9a2b2-76ae-53ea-9a3c-6f622090d1fd",
      "relationship_type": "affected-organization",
      "source_ref": "incident--f4bcf885-df74-5543-8b1f-fe4f297c0e05",
      "target_ref": "identity--6192ea6d-4b60-5588-8ecc-746d956e7b14",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Uber",
          "url": "https://www.uber.com/mx/es/newsroom/actualizacion-de-seguridad-3/",
          "external_id": "cit:0b561df0-be3c-54d0-80ea-33e38427598e",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:bc8308290d899223af235fc46f08161960171cfb89210dfbd606965042fd5950"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--3e3331a2-03d2-541b-82df-a0de31a50059",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:d8a016da-7922-50d0-a044-0ee4d38e5656",
      "confidence": 82,
      "external_references": [
        {
          "source_name": "Uber",
          "url": "https://www.uber.com/mx/es/newsroom/actualizacion-de-seguridad-3/",
          "external_id": "cit:e4911c53-d34e-5a3d-8c1d-36ac2b069c5b",
          "description": "De ahí, el atacante tuvo acceso a varias cuentas de otros empleados, lo cual terminó por darle permisos a ciertas herramientas, incluidas G-Suite y Slack.",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:bc8308290d899223af235fc46f08161960171cfb89210dfbd606965042fd5950"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Lapsus$-linked; MFA fatigue (repeated push notifications) + Slack/internal wiki access."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--ed683571-d83b-539b-8138-18b06dcbf7fc",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "clm:877ddebe-46cc-561e-8289-56d428998cb4",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Uber",
          "url": "https://www.uber.com/mx/es/newsroom/actualizacion-de-seguridad-3/",
          "external_id": "cit:7131767f-5ce2-5900-9c3a-475fbe5916a7",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:bc8308290d899223af235fc46f08161960171cfb89210dfbd606965042fd5950"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The reviewed source documents the uber security incident involving Uber."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--f713ba1f-dd0b-54c3-8beb-b6010ca367f1",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:ed2cb736-c59a-53bb-a64e-4d771c9aa0a7",
      "confidence": 90,
      "external_references": [],
      "x_ally_claim_object": {
        "kind": "iri",
        "value": "https://attack.mitre.org/techniques/T1621/"
      }
    }
  ]
}