{
  "type": "bundle",
  "id": "bundle--1767df92-cdb5-507e-8298-decd100a5672",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--8137b9c5-41ba-52ef-8230-14bf185e0688",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "org:73bae965-fde8-4a7e-b4f4-6ee7fa3214c9",
      "name": "Industria de Diseño Textil, S.A.",
      "identity_class": "organization"
    },
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--be38a411-f37b-58a0-87e3-be71b009174a",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "org:df17636d-e656-465a-ad6a-9cfe0952a1fc",
      "name": "Zara",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--8d167019-b5d4-5b75-8725-35564799cea3",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "brh:0f1fb985-4b36-484a-a151-6ede2b1f6298",
      "name": "Zara former-provider customer-transaction database breach"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--924f9c73-232a-53e6-8e8d-0ec2546faa3b",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "inc:c85fb6a8-386b-4911-9f11-5c87e3f02988",
      "name": "April 2026 Inditex and Zara third-party database incident"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--37e03c97-c94c-5765-8515-dff0cd96c9c6",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "clm:36f1195f-6220-4980-a77a-042f6becdb04",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--0541dd2b-589c-59fa-8193-1d8d83cf3f5d",
      "target_ref": "x-ally-data-category--c79f34f3-405d-57d2-8409-98eff3898231",
      "confidence": 80,
      "external_references": [
        {
          "source_name": "Have I Been Pwned",
          "url": "https://haveibeenpwned.com/api/v3/breach/Zara",
          "external_id": "cit:5544e717-9bd0-4340-b0eb-1d67804e9e42",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:657a75e526b1ee368d50a5de0aaf61f1cadb69c003b44b9f06b8160ce9b18a8a"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--3985f667-2f75-544e-8e4a-027264658714",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "clm:fb9acbe0-53fe-4d59-a92b-674e57b26f40",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--0541dd2b-589c-59fa-8193-1d8d83cf3f5d",
      "target_ref": "x-ally-data-category--7d2e510c-3773-582d-8952-ab532184f0b9",
      "confidence": 85,
      "external_references": [
        {
          "source_name": "Have I Been Pwned",
          "url": "https://haveibeenpwned.com/api/v3/breach/Zara",
          "external_id": "cit:74074d1e-d0d6-4264-8f6f-1119e1a5cb10",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:657a75e526b1ee368d50a5de0aaf61f1cadb69c003b44b9f06b8160ce9b18a8a"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--a13f8760-f807-5686-8e33-7db8286ff5bb",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "clm:6da2e443-9769-49c0-9a76-ef4d4e09393b",
      "relationship_type": "affected-organization",
      "source_ref": "incident--924f9c73-232a-53e6-8e8d-0ec2546faa3b",
      "target_ref": "identity--be38a411-f37b-58a0-87e3-be71b009174a",
      "confidence": 95,
      "external_references": [
        {
          "source_name": "Have I Been Pwned",
          "url": "https://haveibeenpwned.com/api/v3/breach/Zara",
          "external_id": "cit:94c31c1c-c912-4b9d-a539-5c9641d7e13e",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:657a75e526b1ee368d50a5de0aaf61f1cadb69c003b44b9f06b8160ce9b18a8a"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--b7dfc5da-10a6-52c4-87b9-da7d9de2c2ca",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "clm:c88e787f-eeee-435d-b7bc-bc589b112aff",
      "relationship_type": "affected-organization",
      "source_ref": "incident--924f9c73-232a-53e6-8e8d-0ec2546faa3b",
      "target_ref": "identity--8137b9c5-41ba-52ef-8230-14bf185e0688",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "El País",
          "url": "https://elpais.com/economia/2026-04-15/inditex-sufre-un-ataque-informatico-con-acceso-a-bases-de-datos-de-sus-filiales.html",
          "external_id": "cit:cb63444b-2852-40ca-99b4-3f557b421c85",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:b003a66669b5db95bb056da60f00b03e091c878eb57588dc7a2eb5289a4a5ebe"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--d591b283-baca-51c9-8bd6-24c7b3b46563",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "clm:107fb12c-dbd3-4fc2-8835-d10811f3ec4e",
      "relationship_type": "subsidiary-of",
      "source_ref": "identity--be38a411-f37b-58a0-87e3-be71b009174a",
      "target_ref": "identity--8137b9c5-41ba-52ef-8230-14bf185e0688",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "El País",
          "url": "https://elpais.com/economia/2026-04-15/inditex-sufre-un-ataque-informatico-con-acceso-a-bases-de-datos-de-sus-filiales.html",
          "external_id": "cit:a7136acb-73ee-49a5-8eff-8e3392eaf08e",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:b003a66669b5db95bb056da60f00b03e091c878eb57588dc7a2eb5289a4a5ebe"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--ecfed02d-65ce-514d-890e-a070a644d362",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "clm:07549afa-563d-4b23-a28b-3e61e99b950f",
      "relationship_type": "resulted-in",
      "source_ref": "incident--924f9c73-232a-53e6-8e8d-0ec2546faa3b",
      "target_ref": "x-ally-data-exposure--0541dd2b-589c-59fa-8193-1d8d83cf3f5d",
      "confidence": 75,
      "external_references": [
        {
          "source_name": "Have I Been Pwned",
          "url": "https://haveibeenpwned.com/api/v3/breach/Zara",
          "external_id": "cit:1bcd1016-77af-4da2-a9a1-0071d23e4480",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:657a75e526b1ee368d50a5de0aaf61f1cadb69c003b44b9f06b8160ce9b18a8a"
        },
        {
          "source_name": "El País",
          "url": "https://elpais.com/economia/2026-04-15/inditex-sufre-un-ataque-informatico-con-acceso-a-bases-de-datos-de-sus-filiales.html",
          "external_id": "cit:4a07e327-572f-4e94-98e8-61f6db5aa4da",
          "x_ally_stance": "qualifies",
          "x_ally_snapshot_id": "snp:sha256:b003a66669b5db95bb056da60f00b03e091c878eb57588dc7a2eb5289a4a5ebe"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--15507b63-1099-50bf-8b41-a54674f2f195",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "clm:c76f1720-9a12-426e-bbce-ea4e97b70bd7",
      "confidence": 95,
      "external_references": [
        {
          "source_name": "El País",
          "url": "https://elpais.com/economia/2026-04-15/inditex-sufre-un-ataque-informatico-con-acceso-a-bases-de-datos-de-sus-filiales.html",
          "external_id": "cit:1e462d5f-d361-40ec-9a1f-ac6fcd66fd6a",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:b003a66669b5db95bb056da60f00b03e091c878eb57588dc7a2eb5289a4a5ebe"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Inditex said unauthorized access occurred to company databases hosted on a third party's servers."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--17b61b65-a3a7-5d23-8c69-0c2d8f931e68",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "clm:43276990-baa3-4a32-aed8-3e4f42ce4a21",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Have I Been Pwned",
          "url": "https://haveibeenpwned.com/api/v3/breach/Zara",
          "external_id": "cit:b5f62ef6-e746-437c-9801-8be6284a9213",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:657a75e526b1ee368d50a5de0aaf61f1cadb69c003b44b9f06b8160ce9b18a8a"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "HIBP marked the Zara breach record verified and not fabricated."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--4481c8cb-77fc-5237-86a9-862519ca8f76",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "clm:7cef3170-f0ae-41e8-9a3a-d0cadc835d74",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "El País",
          "url": "https://elpais.com/economia/2026-04-15/inditex-sufre-un-ataque-informatico-con-acceso-a-bases-de-datos-de-sus-filiales.html",
          "external_id": "cit:124560e8-c137-477c-aaae-dd2b2a4f719d",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:b003a66669b5db95bb056da60f00b03e091c878eb57588dc7a2eb5289a4a5ebe"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-04-15"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--6c31d2ec-59ce-5691-8526-46a5221771b4",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "clm:51e9cec9-fc1d-4e26-acb6-6bdacf4d130e",
      "confidence": 95,
      "external_references": [
        {
          "source_name": "El País",
          "url": "https://elpais.com/economia/2026-04-15/inditex-sufre-un-ataque-informatico-con-acceso-a-bases-de-datos-de-sus-filiales.html",
          "external_id": "cit:440c690c-0269-4601-9664-2ea6bf7a7fa9",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:b003a66669b5db95bb056da60f00b03e091c878eb57588dc7a2eb5289a4a5ebe"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Inditex said the breach originated with a former technology provider that affected multiple international companies and that Inditex operations and systems were not affected."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--7f218ed1-f01c-54dd-8b0f-f8e852584279",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "clm:024384ea-e765-40df-a422-0a2af38adcdc",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Have I Been Pwned",
          "url": "https://haveibeenpwned.com/api/v3/breach/Zara",
          "external_id": "cit:6035696e-0d20-41fc-9def-718865101af7",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:657a75e526b1ee368d50a5de0aaf61f1cadb69c003b44b9f06b8160ce9b18a8a"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "integer",
        "value": 197376,
        "unit": "record"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--9ef46ff8-fd32-502e-8893-e0a9b5dcf6b2",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "clm:820b114e-d6e2-498a-a696-9ef44890921b",
      "confidence": 95,
      "external_references": [
        {
          "source_name": "El País",
          "url": "https://elpais.com/economia/2026-04-15/inditex-sufre-un-ataque-informatico-con-acceso-a-bases-de-datos-de-sus-filiales.html",
          "external_id": "cit:9c789bbb-a6db-426e-947c-b3f6af131be9",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:b003a66669b5db95bb056da60f00b03e091c878eb57588dc7a2eb5289a4a5ebe"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Inditex said the databases contained information about commercial relationships with customers in different markets but did not contain names, phone numbers, home addresses, passwords, bank cards, or other payment methods, and it initially ruled out personal-customer-data impact."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--ba67e53f-eb07-5cfc-8a96-318b7e3e3fe3",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "clm:bbb3788e-7b39-46d3-8a90-8cc0b28462cb",
      "confidence": 95,
      "external_references": [
        {
          "source_name": "El País",
          "url": "https://elpais.com/economia/2026-04-15/inditex-sufre-un-ataque-informatico-con-acceso-a-bases-de-datos-de-sus-filiales.html",
          "external_id": "cit:7365bfb6-a4f1-4aba-bdf6-f765cc1985bd",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:b003a66669b5db95bb056da60f00b03e091c878eb57588dc7a2eb5289a4a5ebe"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Inditex said it immediately applied its security protocols and reported the incident to the relevant authorities."
      }
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--7d2e510c-3773-582d-8952-ab532184f0b9",
      "created": "2026-08-09T04:22:59Z",
      "modified": "2026-08-09T04:22:59Z",
      "x_ally_original_id": "dat:9d056b6a-1e01-4355-a828-41d9aaa63c9c",
      "name": "Customer service records"
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--c79f34f3-405d-57d2-8409-98eff3898231",
      "created": "2026-08-08T23:12:00Z",
      "modified": "2026-08-08T23:12:00Z",
      "x_ally_original_id": "dat:5abcee7e-4a37-494a-b6ba-87ff46149be9",
      "name": "Contact information"
    },
    {
      "type": "x-ally-data-exposure",
      "spec_version": "2.1",
      "id": "x-ally-data-exposure--0541dd2b-589c-59fa-8193-1d8d83cf3f5d",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "exp:778071b7-a85d-4839-a224-4df3dfa0fb89",
      "name": "Zara support, order, market, and email corpus"
    }
  ]
}