{
  "type": "bundle",
  "id": "bundle--9ae5b1be-bcc9-5113-82b2-6a0ef7c3544c",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--d7ab7fec-b5ea-5bf9-8998-7509ab74dae7",
      "created": "2026-11-03T14:05:45.510181+00:00",
      "modified": "2026-11-03T14:05:45.510181+00:00",
      "x_ally_original_id": "org:8f75b22a-d98b-475b-adfd-9439cd3752bc",
      "name": "WorkOS",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--e240d9fe-aff9-5307-880a-612bfa8db86b",
      "created": "2026-11-03T14:05:45.510181+00:00",
      "modified": "2026-11-03T14:05:45.510181+00:00",
      "x_ally_original_id": "inc:3a466d6d-c082-43bc-848b-77b6efb26b31",
      "name": "WorkOS internal sales-tool data incident"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--fd58c341-84fa-581a-8201-2269d0e867fb",
      "created": "2026-11-03T14:05:45.510181+00:00",
      "modified": "2026-11-03T14:05:45.510181+00:00",
      "x_ally_original_id": "brh:9422df42-69d3-4057-ad32-61401c1c9a81",
      "name": "WorkOS internal sales-tool data incident"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--3d3c4ad2-f165-5ce4-8075-200ebc58fded",
      "created": "2026-11-03T14:05:45.510181+00:00",
      "modified": "2026-11-03T14:05:45.510181+00:00",
      "x_ally_original_id": "clm:c529af7f-2ff2-49cf-8ed9-a0c7dd05a599",
      "relationship_type": "resulted-in",
      "source_ref": "incident--e240d9fe-aff9-5307-880a-612bfa8db86b",
      "target_ref": "x-ally-event--570ac641-b579-5a99-8583-5fa224986251",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "WorkOS",
          "url": "https://workos.com/security/bulletins/october-30th-2026-data-security-incident",
          "external_id": "cit:0b0e78e4-fdc4-4bba-b27d-9dbae4303c32",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:48585555b76c1cb4e9041148e222bd4e560e2c091a7a5a2b31a18e95ab0cf2ed"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--6974c355-d615-5060-8746-23c2455b7df5",
      "created": "2026-11-03T14:05:45.510181+00:00",
      "modified": "2026-11-03T14:05:45.510181+00:00",
      "x_ally_original_id": "clm:cd90524e-424c-4240-b829-92b9370e3a5d",
      "relationship_type": "affected-organization",
      "source_ref": "incident--e240d9fe-aff9-5307-880a-612bfa8db86b",
      "target_ref": "identity--d7ab7fec-b5ea-5bf9-8998-7509ab74dae7",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "WorkOS",
          "url": "https://workos.com/security/bulletins/october-30th-2026-data-security-incident",
          "external_id": "cit:455e9696-7992-44e1-908a-c6be1833e921",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:48585555b76c1cb4e9041148e222bd4e560e2c091a7a5a2b31a18e95ab0cf2ed"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--f0894bd6-d653-5cc0-8b1d-42da7cd4f5d4",
      "created": "2026-11-03T14:05:45.510181+00:00",
      "modified": "2026-11-03T14:05:45.510181+00:00",
      "x_ally_original_id": "clm:5fb2f4bb-f1de-4999-8054-2c1ecb68f0b7",
      "relationship_type": "resulted-in",
      "source_ref": "incident--e240d9fe-aff9-5307-880a-612bfa8db86b",
      "target_ref": "x-ally-event--481e6686-5c28-500a-834e-68d2bee2e29a",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "WorkOS",
          "url": "https://workos.com/security/bulletins/october-30th-2026-data-security-incident",
          "external_id": "cit:052be816-b35c-41d7-9505-49d2d7dec944",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:48585555b76c1cb4e9041148e222bd4e560e2c091a7a5a2b31a18e95ab0cf2ed"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--49a6bb23-1a00-57f6-8cea-954b4ea4f6be",
      "created": "2026-11-03T14:05:45.510181+00:00",
      "modified": "2026-11-03T14:05:45.510181+00:00",
      "x_ally_original_id": "clm:cfb54a3a-fac7-4f80-b16d-ffcb6ad280b4",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "WorkOS",
          "url": "https://workos.com/security/bulletins/october-30th-2026-data-security-incident",
          "external_id": "cit:2ce4d890-e6a4-4e22-88dd-35fb733ed313",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:48585555b76c1cb4e9041148e222bd4e560e2c091a7a5a2b31a18e95ab0cf2ed"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "WorkOS reported no evidence of access to its application data or production services, and continued assessing individual customer impact."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--4e3f745a-aecb-5318-89ba-8df3919d33a7",
      "created": "2026-11-03T14:05:45.510181+00:00",
      "modified": "2026-11-03T14:05:45.510181+00:00",
      "x_ally_original_id": "clm:ebb26580-37ef-47bc-b7c8-f387ec06ce25",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "WorkOS",
          "url": "https://workos.com/security/bulletins/october-30th-2026-data-security-incident",
          "external_id": "cit:72972f74-8f59-4c68-afd7-5b53cb04dd0e",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:48585555b76c1cb4e9041148e222bd4e560e2c091a7a5a2b31a18e95ab0cf2ed"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "WorkOS said its investigation identified an AI-assisted offensive security framework used for reconnaissance and exploitation attempts. The bulletin does not identify a framework, actor or initial exploit."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--65757a69-c888-5cbb-8fb5-da256228c7ed",
      "created": "2026-11-03T14:05:45.510181+00:00",
      "modified": "2026-11-03T14:05:45.510181+00:00",
      "x_ally_original_id": "clm:36465525-7734-475a-9f9f-f71b282cdc41",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "WorkOS",
          "url": "https://workos.com/security/bulletins/october-30th-2026-data-security-incident",
          "external_id": "cit:254c6443-adb9-4be6-bf70-9f44a5fa40c0",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:48585555b76c1cb4e9041148e222bd4e560e2c091a7a5a2b31a18e95ab0cf2ed"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-11-02"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--6e30bd67-8f52-56ca-81ca-0997046fa30a",
      "created": "2026-11-03T14:05:45.510181+00:00",
      "modified": "2026-11-03T14:05:45.510181+00:00",
      "x_ally_original_id": "clm:9eb0986b-2483-4682-a38e-3fc5735c8940",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "WorkOS",
          "url": "https://workos.com/security/bulletins/october-30th-2026-data-security-incident",
          "external_id": "cit:ad1bd238-dbfe-4280-9daa-284f3cc1b13c",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:48585555b76c1cb4e9041148e222bd4e560e2c091a7a5a2b31a18e95ab0cf2ed"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-30"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--835a9e59-1205-5b8a-878d-835de9b1a35d",
      "created": "2026-11-03T14:05:45.510181+00:00",
      "modified": "2026-11-03T14:05:45.510181+00:00",
      "x_ally_original_id": "clm:7fc72c97-446e-4a9f-8459-76567680bddd",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "WorkOS",
          "url": "https://workos.com/security/bulletins/october-30th-2026-data-security-incident",
          "external_id": "cit:45866800-390d-4679-8f9d-b3baed9d9ca9",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:48585555b76c1cb4e9041148e222bd4e560e2c091a7a5a2b31a18e95ab0cf2ed"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Accessed information included business contacts, account histories, communication summaries and excerpts, and product-usage and connection-health metadata."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--a6672c74-f529-592b-80a9-c40b3abe0e32",
      "created": "2026-11-03T14:05:45.510181+00:00",
      "modified": "2026-11-03T14:05:45.510181+00:00",
      "x_ally_original_id": "clm:da043bbf-8f1f-4bdd-b5d1-b37c580b184a",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "WorkOS",
          "url": "https://workos.com/security/bulletins/october-30th-2026-data-security-incident",
          "external_id": "cit:4d6866da-d3a9-4c19-8c49-2bbf88c00910",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:48585555b76c1cb4e9041148e222bd4e560e2c091a7a5a2b31a18e95ab0cf2ed"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "WorkOS disabled external access to the tool, reviewed internal access controls, engaged independent forensic specialists and planned direct customer notifications."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--d75a14d8-5d7e-5568-8d97-2848cf27e61d",
      "created": "2026-11-03T14:05:45.510181+00:00",
      "modified": "2026-11-03T14:05:45.510181+00:00",
      "x_ally_original_id": "clm:154e1386-025b-40b6-a8e2-61b3a4194e6c",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "WorkOS",
          "url": "https://workos.com/security/bulletins/october-30th-2026-data-security-incident",
          "external_id": "cit:c043ad22-f55c-4bd3-a0f1-b9729152a55a",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:48585555b76c1cb4e9041148e222bd4e560e2c091a7a5a2b31a18e95ab0cf2ed"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "WorkOS identified unauthorized access to an internal sales application on October 30, 2026."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--e12f0201-78ca-5def-8423-e1ad859bf792",
      "created": "2026-11-03T14:05:45.510181+00:00",
      "modified": "2026-11-03T14:05:45.510181+00:00",
      "x_ally_original_id": "clm:e3baef59-44c4-481f-8993-99e8310f61a7",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "WorkOS",
          "url": "https://workos.com/security/bulletins/october-30th-2026-data-security-incident",
          "external_id": "cit:880c28e1-6e67-4266-b981-9f29e167ed3e",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:48585555b76c1cb4e9041148e222bd4e560e2c091a7a5a2b31a18e95ab0cf2ed"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-30"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--eaaff1ca-ffd5-54e0-8f38-06221b6d04b0",
      "created": "2026-11-03T14:05:45.510181+00:00",
      "modified": "2026-11-03T14:05:45.510181+00:00",
      "x_ally_original_id": "clm:8261e13f-7147-4e3a-9a14-2749d61e3767",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "WorkOS",
          "url": "https://workos.com/security/bulletins/october-30th-2026-data-security-incident",
          "external_id": "cit:6b215f36-7d27-421d-8d4b-eec6ee37b709",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:48585555b76c1cb4e9041148e222bd4e560e2c091a7a5a2b31a18e95ab0cf2ed"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-11-02"
      }
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--481e6686-5c28-500a-834e-68d2bee2e29a",
      "created": "2026-11-03T14:05:45.510181+00:00",
      "modified": "2026-11-03T14:05:45.510181+00:00",
      "x_ally_original_id": "evt:dc8b6d3e-07a5-4408-92d9-5f3f6e732a52",
      "name": "Unauthorized access identified"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--570ac641-b579-5a99-8583-5fa224986251",
      "created": "2026-11-03T14:05:45.510181+00:00",
      "modified": "2026-11-03T14:05:45.510181+00:00",
      "x_ally_original_id": "evt:4b55abdc-41d3-4d98-b59b-f7430cf3b8b1",
      "name": "Security bulletin published"
    }
  ]
}