{
  "type": "bundle",
  "id": "bundle--d883422f-7009-5fad-8e83-fc1c67092ab6",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--2d055f5e-fcf9-5964-89db-bab6e6ab050a",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "org:aa332d67-874e-4975-be59-af311d25e11e",
      "name": "Vimeo.com, Inc.",
      "identity_class": "organization"
    },
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--363a2080-cc89-5ae2-8bb6-57194db06d6a",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "org:8ce0e4bd-4d03-4ae8-9f46-a25b39afaab1",
      "name": "Anodot Ltd.",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--87eb1c8b-09ab-5e57-8b90-48aed956f63d",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "brh:8cc6595d-00f2-40ec-949c-0e4341802134",
      "name": "Vimeo Anodot third-party data breach"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--eeebf51e-4b51-5464-8449-6df9dddb19ed",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "inc:9c9a4944-01b2-42e9-98e6-f232ea225ca6",
      "name": "2026 Vimeo data access through Anodot"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--2e0de784-822b-541e-8fbf-e47406bd2cc1",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "clm:51b444ab-9469-496a-9e13-f5c3e31ffd8e",
      "relationship_type": "processor-for",
      "source_ref": "identity--363a2080-cc89-5ae2-8bb6-57194db06d6a",
      "target_ref": "identity--2d055f5e-fcf9-5964-89db-bab6e6ab050a",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Vimeo.com, Inc.",
          "url": "https://vimeo.com/blog/post/anodot-third-party-security-incident",
          "external_id": "cit:ac462b38-71b8-4db0-970d-30c9c080dc85",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e7ca9e05b300b10d7517ebae067e41f2d0ddfbed36b5e6caebe548f78888c962"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--564fc5d2-7801-570d-8137-e5c44c4a1298",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "clm:c6f34419-7a64-437d-a591-c3eee33ac4b6",
      "relationship_type": "resulted-in",
      "source_ref": "incident--eeebf51e-4b51-5464-8449-6df9dddb19ed",
      "target_ref": "x-ally-data-exposure--7b2cc3dc-7020-5f12-8269-700b1d11f775",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Vimeo.com, Inc.",
          "url": "https://vimeo.com/blog/post/anodot-third-party-security-incident",
          "external_id": "cit:d54e6990-4e1a-4640-97ba-ddac4c7ecda5",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e7ca9e05b300b10d7517ebae067e41f2d0ddfbed36b5e6caebe548f78888c962"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--83419cda-84dc-5128-850b-6e9cf5df0406",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "clm:0ad11eeb-c309-49d7-a678-f808f32bf548",
      "relationship_type": "affected-organization",
      "source_ref": "incident--eeebf51e-4b51-5464-8449-6df9dddb19ed",
      "target_ref": "identity--2d055f5e-fcf9-5964-89db-bab6e6ab050a",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Vimeo.com, Inc.",
          "url": "https://vimeo.com/blog/post/anodot-third-party-security-incident",
          "external_id": "cit:800654f2-d07b-437a-82fa-cac6e54fb5d4",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e7ca9e05b300b10d7517ebae067e41f2d0ddfbed36b5e6caebe548f78888c962"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--c50d3d8d-880e-5ad8-8a1a-c24ad47737b4",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "clm:e2497883-028e-44dd-a349-d8e4de0f6eb6",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--7b2cc3dc-7020-5f12-8269-700b1d11f775",
      "target_ref": "x-ally-data-category--c79f34f3-405d-57d2-8409-98eff3898231",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Vimeo.com, Inc.",
          "url": "https://vimeo.com/blog/post/anodot-third-party-security-incident",
          "external_id": "cit:64c9431b-1f28-4019-86d5-0f9c027f5e39",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e7ca9e05b300b10d7517ebae067e41f2d0ddfbed36b5e6caebe548f78888c962"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--d7600a3c-5cd1-56fd-8f2f-7e8cf643ce6e",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "clm:c1ff4d8c-914c-49dd-aaf7-d9a44bba0683",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--7b2cc3dc-7020-5f12-8269-700b1d11f775",
      "target_ref": "x-ally-data-category--a2b7dd9d-0c02-5710-88ed-ea507d0ffa07",
      "confidence": 90,
      "external_references": [
        {
          "source_name": "Have I Been Pwned",
          "url": "https://haveibeenpwned.com/api/v3/breach/Vimeo",
          "external_id": "cit:3a751675-c5a8-4cbd-a486-5a20d14b6f51",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:4dc8ce0bba1ab396edb717a9657a99ca286a0ed7003ea5fcac66db683cd05d0f"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--03dc7a85-96b4-5226-86cc-8e6044f70007",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "clm:485a93a1-4ae3-4927-acbb-a77151def92e",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Vimeo.com, Inc.",
          "url": "https://vimeo.com/blog/post/anodot-third-party-security-incident",
          "external_id": "cit:eb9cfdb9-211c-408b-9ace-42d2d5137924",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e7ca9e05b300b10d7517ebae067e41f2d0ddfbed36b5e6caebe548f78888c962"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Vimeo said the accessed data did not include Vimeo video content, valid user login credentials, or payment card information and that login credentials were secure."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--0f710edb-a8e5-51d9-8026-19c3c34954a6",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "clm:7ae48e03-9568-494c-b03d-bd5dc9069230",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Have I Been Pwned",
          "url": "https://haveibeenpwned.com/api/v3/breach/Vimeo",
          "external_id": "cit:f8b72fee-7643-432c-8bbd-2266c9e761b8",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:4dc8ce0bba1ab396edb717a9657a99ca286a0ed7003ea5fcac66db683cd05d0f"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "HIBP marked the Vimeo breach record verified and not fabricated."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--4352f057-b796-58a2-80e1-0dc244fa4b6c",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "clm:7752d284-01d6-4baa-b544-974d67261a47",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Vimeo.com, Inc.",
          "url": "https://vimeo.com/blog/post/anodot-third-party-security-incident",
          "external_id": "cit:60056d3d-e4b7-4f81-b34b-3b38eb18b807",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e7ca9e05b300b10d7517ebae067e41f2d0ddfbed36b5e6caebe548f78888c962"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Vimeo said it disabled all Anodot credentials, removed the Anodot integration, engaged third-party security experts, and notified law enforcement; the incident did not disrupt Vimeo systems or service."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--4a9f6755-e664-5afd-8157-5ef60d232933",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "clm:527086a5-138d-429e-ab75-22b0c55b9d9a",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Vimeo.com, Inc.",
          "url": "https://vimeo.com/blog/post/anodot-third-party-security-incident",
          "external_id": "cit:88f38f22-c844-45e5-849e-785fabd974c7",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e7ca9e05b300b10d7517ebae067e41f2d0ddfbed36b5e6caebe548f78888c962"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Vimeo said an unauthorized actor accessed certain Vimeo user and customer data as a result of the Anodot breach."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--8b7a0bdd-6ce4-5cb1-8bfa-180f7549216d",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "clm:79bb0bb7-9efe-466e-a1ff-746814ec5825",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Vimeo.com, Inc.",
          "url": "https://vimeo.com/blog/post/anodot-third-party-security-incident",
          "external_id": "cit:a4783fb9-72a3-4e59-8ad2-c172498c40af",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e7ca9e05b300b10d7517ebae067e41f2d0ddfbed36b5e6caebe548f78888c962"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-04-27"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--9e479ab3-8a78-58eb-8e79-50b6b475230c",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "clm:c222772c-2cb5-495f-b744-95a2a35d5e5f",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Vimeo.com, Inc.",
          "url": "https://vimeo.com/blog/post/anodot-third-party-security-incident",
          "external_id": "cit:bc3f6f72-08c7-4324-857d-d28a0d7b6b3b",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e7ca9e05b300b10d7517ebae067e41f2d0ddfbed36b5e6caebe548f78888c962"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Vimeo said the accessed databases primarily contained technical data, video titles and metadata, and in some cases customer email addresses."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--a51b91ea-47fa-5787-8a9d-d3ad3770bd53",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "clm:14536a34-739e-41a0-a870-3ac91b590e50",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Have I Been Pwned",
          "url": "https://haveibeenpwned.com/api/v3/breach/Vimeo",
          "external_id": "cit:285126f1-9d08-48c8-8e64-00648d09bfc1",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:4dc8ce0bba1ab396edb717a9657a99ca286a0ed7003ea5fcac66db683cd05d0f"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "integer",
        "value": 119167,
        "unit": "record"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--f4daced1-74ed-5685-88d7-3dbd1798edde",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "clm:68da4948-e9b8-4a98-964c-e7a62c8a8b17",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Vimeo.com, Inc.",
          "url": "https://vimeo.com/blog/post/anodot-third-party-security-incident",
          "external_id": "cit:940f6c6c-b7e0-4b97-afb2-dedd0eebd3ce",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e7ca9e05b300b10d7517ebae067e41f2d0ddfbed36b5e6caebe548f78888c962"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "In its May 15 update, Vimeo said its investigation was complete and potentially impacted users and customers had been contacted as appropriate."
      }
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--a2b7dd9d-0c02-5710-88ed-ea507d0ffa07",
      "created": "2026-08-08T23:12:00Z",
      "modified": "2026-08-08T23:12:00Z",
      "x_ally_original_id": "dat:559cf3f5-80c7-45ba-a930-ff0bfa8d17b0",
      "name": "Names"
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--c79f34f3-405d-57d2-8409-98eff3898231",
      "created": "2026-08-08T23:12:00Z",
      "modified": "2026-08-08T23:12:00Z",
      "x_ally_original_id": "dat:5abcee7e-4a37-494a-b6ba-87ff46149be9",
      "name": "Contact information"
    },
    {
      "type": "x-ally-data-exposure",
      "spec_version": "2.1",
      "id": "x-ally-data-exposure--7b2cc3dc-7020-5f12-8269-700b1d11f775",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "exp:c2537629-ead9-453e-b76b-58c80c12ed3f",
      "name": "Vimeo technical, metadata, and contact-data corpus"
    }
  ]
}