{
  "type": "bundle",
  "id": "bundle--7ada3e4e-ba60-5496-8bc9-51df6e4a0c11",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--54308d36-f1e7-5bda-85f1-39cb504e7b7a",
      "created": "2026-11-09T14:14:58.230658+00:00",
      "modified": "2026-11-09T14:14:58.230658+00:00",
      "x_ally_original_id": "org:29e2a093-1d1a-4e07-9057-5fa4c4d7b459",
      "name": "Z-kai",
      "identity_class": "organization"
    },
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--dd5b32fe-62b2-5f66-8c6f-82a05a553feb",
      "created": "2026-11-09T14:14:58.230658+00:00",
      "modified": "2026-11-09T14:14:58.230658+00:00",
      "x_ally_original_id": "org:7018df1d-0fc7-4996-8241-9291b5ca2135",
      "name": "Eikoh",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--054c4ccb-2e67-5427-8b7d-85e066e93946",
      "created": "2026-11-09T14:14:58.230658+00:00",
      "modified": "2026-11-09T14:14:58.230658+00:00",
      "x_ally_original_id": "inc:fc1f3c3f-5b71-43ee-b927-1207e85b75c5",
      "name": "Z-kai and Eikoh account compromise"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--8946549b-24ca-55fa-8182-668a87aa52b3",
      "created": "2026-11-09T14:14:58.230658+00:00",
      "modified": "2026-11-09T14:14:58.230658+00:00",
      "x_ally_original_id": "brh:c20af34f-ebe0-4c22-be50-b6e535417b85",
      "name": "Z-kai and Eikoh account compromise"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--0a5ce669-884e-5813-8f6a-eb03389fb0ce",
      "created": "2026-11-09T14:14:58.230658+00:00",
      "modified": "2026-11-09T14:14:58.230658+00:00",
      "x_ally_original_id": "clm:75ba1a48-77f7-4162-9384-550493e945f5",
      "relationship_type": "affected-organization",
      "source_ref": "incident--054c4ccb-2e67-5427-8b7d-85e066e93946",
      "target_ref": "identity--dd5b32fe-62b2-5f66-8c6f-82a05a553feb",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Zoshinkai Holdings",
          "url": "https://www.zkai.co.jp/post-121568/",
          "external_id": "cit:f4df7853-d494-483f-8c70-57bbcb2eb70f",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:4a5388bf043ef171c850e05995a4ef4ce2d8f610351c2f847ebb5170deea3839"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--a80bf14d-2b1c-59a7-8409-3ee6d178a95a",
      "created": "2026-11-09T14:14:58.230658+00:00",
      "modified": "2026-11-09T14:14:58.230658+00:00",
      "x_ally_original_id": "clm:afcc4e61-8015-4be2-afb1-d0babaf4e160",
      "relationship_type": "resulted-in",
      "source_ref": "incident--054c4ccb-2e67-5427-8b7d-85e066e93946",
      "target_ref": "x-ally-event--4daab486-7e51-5c29-80f7-4c543e8f38d7",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Zoshinkai Holdings",
          "url": "https://www.zkai.co.jp/post-121568/",
          "external_id": "cit:039e37cf-45eb-44fb-96cd-a9e0138d90b8",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:4a5388bf043ef171c850e05995a4ef4ce2d8f610351c2f847ebb5170deea3839"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--bd17aec2-c7c1-5cc1-8581-21deb00d011a",
      "created": "2026-11-09T14:14:58.230658+00:00",
      "modified": "2026-11-09T14:14:58.230658+00:00",
      "x_ally_original_id": "clm:a803b25c-5899-4342-9b36-84c286f1111f",
      "relationship_type": "affected-organization",
      "source_ref": "incident--054c4ccb-2e67-5427-8b7d-85e066e93946",
      "target_ref": "identity--54308d36-f1e7-5bda-85f1-39cb504e7b7a",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Zoshinkai Holdings",
          "url": "https://www.zkai.co.jp/post-121568/",
          "external_id": "cit:1535edd8-e2d0-4fc7-9d21-fa2e517b09ba",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:4a5388bf043ef171c850e05995a4ef4ce2d8f610351c2f847ebb5170deea3839"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--dee6c519-5110-5848-8326-564dc3b988b7",
      "created": "2026-11-09T14:14:58.230658+00:00",
      "modified": "2026-11-09T14:14:58.230658+00:00",
      "x_ally_original_id": "clm:f4b8bbb9-2212-4161-a32b-cd1acea1929f",
      "relationship_type": "resulted-in",
      "source_ref": "incident--054c4ccb-2e67-5427-8b7d-85e066e93946",
      "target_ref": "x-ally-event--4fe02e61-3ec5-53ed-8fe3-60549033d70e",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Zoshinkai Holdings",
          "url": "https://www.zkai.co.jp/post-121568/",
          "external_id": "cit:7e5666c7-f725-4b09-91bb-ef66bbc0e379",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:4a5388bf043ef171c850e05995a4ef4ce2d8f610351c2f847ebb5170deea3839"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--e54ae2cb-26e2-537e-8275-46b8111d7d4d",
      "created": "2026-11-09T14:14:58.230658+00:00",
      "modified": "2026-11-09T14:14:58.230658+00:00",
      "x_ally_original_id": "clm:e9da3198-9464-4635-bf54-8a337d60318f",
      "relationship_type": "resulted-in",
      "source_ref": "incident--054c4ccb-2e67-5427-8b7d-85e066e93946",
      "target_ref": "x-ally-event--7d1c4c20-9631-5a37-848c-5f4aab181f37",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Zoshinkai Holdings",
          "url": "https://www.zkai.co.jp/post-121568/",
          "external_id": "cit:785e73a4-7ff2-4f60-a4b5-a92caa272237",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:4a5388bf043ef171c850e05995a4ef4ce2d8f610351c2f847ebb5170deea3839"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--0ed587d4-632b-5358-85bb-bcb136c1455f",
      "created": "2026-11-09T14:14:58.230658+00:00",
      "modified": "2026-11-09T14:14:58.230658+00:00",
      "x_ally_original_id": "clm:a3613312-cfcc-49d4-9d9a-79cf941c0e05",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Zoshinkai Holdings",
          "url": "https://www.zkai.co.jp/post-121568/",
          "external_id": "cit:56555f4f-fa6a-48ef-b6b6-7cf08a579fd8",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:4a5388bf043ef171c850e05995a4ef4ce2d8f610351c2f847ebb5170deea3839"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "An initial Z-ID probe compromised one customer account early on October 14. Following Eikoh’s compromise around 18:00, stolen account information was used in automated password-reset attacks against a Z-ID authentication vulnerability, compromising another 12 accounts."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--2661d916-ae0b-55c2-872c-97ff60a9924d",
      "created": "2026-11-09T14:14:58.230658+00:00",
      "modified": "2026-11-09T14:14:58.230658+00:00",
      "x_ally_original_id": "clm:7fced3b4-6632-4df4-b8aa-036b61641eb9",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Zoshinkai Holdings",
          "url": "https://www.zkai.co.jp/post-121568/",
          "external_id": "cit:9fea1e21-83df-4508-a440-184e26db0cb1",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:4a5388bf043ef171c850e05995a4ef4ce2d8f610351c2f847ebb5170deea3839"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The group reported 108 compromised account records in total: 95 employee/contractor and 13 customer accounts. It counted 953 automated Z-ID password-reset accesses; that is an attempt count, not an affected-person count."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--48433466-c4d8-561a-8e4a-4cc3d3c552d9",
      "created": "2026-11-09T14:14:58.230658+00:00",
      "modified": "2026-11-09T14:14:58.230658+00:00",
      "x_ally_original_id": "clm:18bd8678-3ecf-4c97-b171-dd378f370907",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Zoshinkai Holdings",
          "url": "https://www.zkai.co.jp/post-121568/",
          "external_id": "cit:4890d25e-fe94-471a-bbf6-82cc72034064",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:4a5388bf043ef171c850e05995a4ef4ce2d8f610351c2f847ebb5170deea3839"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Thirteen Z-ID account passwords were changed without authorization. Customer names, Z-IDs, email addresses and, for some customers, application dates may have been viewed. No payment-information leakage was confirmed."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--599e2717-ad35-514a-81ed-5793ac2e8dce",
      "created": "2026-11-09T14:14:58.230658+00:00",
      "modified": "2026-11-09T14:14:58.230658+00:00",
      "x_ally_original_id": "clm:d9eba99f-c5b3-4ccf-a9fa-8ec78c9e0d4f",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Zoshinkai Holdings",
          "url": "https://www.zkai.co.jp/post-121568/",
          "external_id": "cit:cf8f9854-f246-409e-9d21-80a40a64090c",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:4a5388bf043ef171c850e05995a4ef4ce2d8f610351c2f847ebb5170deea3839"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-14"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--7188d5d2-cda3-5dc4-89ee-e29cf7280bc5",
      "created": "2026-11-09T14:14:58.230658+00:00",
      "modified": "2026-11-09T14:14:58.230658+00:00",
      "x_ally_original_id": "clm:c1c2177b-cd0e-4869-9753-5c5f9e2c9009",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Zoshinkai Holdings",
          "url": "https://www.zkai.co.jp/post-121568/",
          "external_id": "cit:4cf3a6a2-33d6-4a6a-938a-fa65834d404a",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:4a5388bf043ef171c850e05995a4ef4ce2d8f610351c2f847ebb5170deea3839"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The Z-kai group reported linked unauthorized access to Eikoh’s time-management system and Z-kai’s shared Z-ID login system on October 14–15, 2026."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--7eb14b65-dc45-5817-86ec-dded05f2df35",
      "created": "2026-11-09T14:14:58.230658+00:00",
      "modified": "2026-11-09T14:14:58.230658+00:00",
      "x_ally_original_id": "clm:294564a4-61e6-4722-8249-0b2e5a151148",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Zoshinkai Holdings",
          "url": "https://www.zkai.co.jp/post-121568/",
          "external_id": "cit:2ee3f5a8-7890-44de-97d0-4e067ac28793",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:4a5388bf043ef171c850e05995a4ef4ce2d8f610351c2f847ebb5170deea3839"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-15"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--91317945-8d03-588c-8a4f-a7ad9e0cf951",
      "created": "2026-11-09T14:14:58.230658+00:00",
      "modified": "2026-11-09T14:14:58.230658+00:00",
      "x_ally_original_id": "clm:b3663a15-8c13-4011-81e3-321c3966fdae",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Zoshinkai Holdings",
          "url": "https://www.zkai.co.jp/post-121568/",
          "external_id": "cit:161bcecb-e07b-401e-81de-3c880cb80f35",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:4a5388bf043ef171c850e05995a4ef4ce2d8f610351c2f847ebb5170deea3839"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Eikoh’s time-management compromise exposed 95 employee and contractor accounts, including login IDs, password hashes, names and registered email addresses. That system held no student or guardian personal information, according to the group."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--b7ddc6c6-654c-5028-80c3-23f3e6022006",
      "created": "2026-11-09T14:14:58.230658+00:00",
      "modified": "2026-11-09T14:14:58.230658+00:00",
      "x_ally_original_id": "clm:11f87528-2178-4dbd-b57d-d73da93c8e8a",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Zoshinkai Holdings",
          "url": "https://www.zkai.co.jp/post-121568/",
          "external_id": "cit:b4ac8cd9-4567-4e05-8e64-08de08c82f42",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:4a5388bf043ef171c850e05995a4ef4ce2d8f610351c2f847ebb5170deea3839"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-11-09"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--cfdcaffb-535f-55c6-8cb2-15d8350fb47b",
      "created": "2026-11-09T14:14:58.230658+00:00",
      "modified": "2026-11-09T14:14:58.230658+00:00",
      "x_ally_original_id": "clm:88972aae-0116-42d6-b68a-44492ec479c5",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Zoshinkai Holdings",
          "url": "https://www.zkai.co.jp/post-121568/",
          "external_id": "cit:704ad3af-441b-4be7-b708-a1778e470502",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:4a5388bf043ef171c850e05995a4ef4ce2d8f610351c2f847ebb5170deea3839"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Eikoh blocked external access, notified affected people and retired the time-management system. Z-kai completed security repairs and individual customer notifications."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--eea4e485-053b-519e-84cf-f9da28f6f7e4",
      "created": "2026-11-09T14:14:58.230658+00:00",
      "modified": "2026-11-09T14:14:58.230658+00:00",
      "x_ally_original_id": "clm:faed5c93-3aa8-4514-ab3f-10b6dd625329",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Zoshinkai Holdings",
          "url": "https://www.zkai.co.jp/post-121568/",
          "external_id": "cit:a1c17a08-5d78-4017-bfeb-c357713e83a3",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:4a5388bf043ef171c850e05995a4ef4ce2d8f610351c2f847ebb5170deea3839"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-11-09"
      }
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--4daab486-7e51-5c29-80f7-4c543e8f38d7",
      "created": "2026-11-09T14:14:58.230658+00:00",
      "modified": "2026-11-09T14:14:58.230658+00:00",
      "x_ally_original_id": "evt:4fc3ec62-3f3d-4626-a96e-d35bad9876d7",
      "name": "Group publishes connected-incident account"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--4fe02e61-3ec5-53ed-8fe3-60549033d70e",
      "created": "2026-11-09T14:14:58.230658+00:00",
      "modified": "2026-11-09T14:14:58.230658+00:00",
      "x_ally_original_id": "evt:e0ec345b-9254-4b35-b542-5fded80ff46f",
      "name": "Z-ID probing and Eikoh account compromise"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--7d1c4c20-9631-5a37-848c-5f4aab181f37",
      "created": "2026-11-09T14:14:58.230658+00:00",
      "modified": "2026-11-09T14:14:58.230658+00:00",
      "x_ally_original_id": "evt:01d966f4-e1c5-4385-8528-5825f35c5032",
      "name": "Automated Z-ID reset activity continued into early morning"
    }
  ]
}