{
  "type": "bundle",
  "id": "bundle--7e87c3bd-3177-505d-89c6-8cc58140fade",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--8582fb96-90e9-5a81-8ff1-76245a2303ce",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "org:96eeedac-7469-41f0-8aaf-b2410e4a54a2",
      "name": "Zeabur Inc.",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--95136b65-b296-5beb-8d23-cffdc628ff1b",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "brh:42fd5d92-82da-4545-a7c2-d973ce4681e8",
      "name": "Zeabur production-database credential breach"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--e9cbffca-b09b-5c1b-8d57-a5957b458c48",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "inc:02948765-a4af-47f7-aa4d-c4ae6db41fb0",
      "name": "Zeabur production-database credential breach"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--18c3b542-852f-5d2d-8066-0bdc8ca35bd3",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:088df05a-22ae-4c43-9a12-09e1f2e6f5c4",
      "relationship_type": "resulted-in",
      "source_ref": "incident--e9cbffca-b09b-5c1b-8d57-a5957b458c48",
      "target_ref": "x-ally-event--49cbe5ab-48e1-5302-8a7f-e7945cfbe37f",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Zeabur Inc.",
          "url": "https://zeabur.com/changelogs/aihub-shutdown",
          "external_id": "cit:884266d3-65a7-497a-a1c5-4507c7f03403",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:4279010a2509b67853c417ba0b1a6b3cb4438615761009c3d21359e27f3a96f6"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--357cbec0-afff-51e9-8717-069d6f474fe3",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:0ffb9d50-c92d-4701-9388-c3653afcf929",
      "relationship_type": "affected-organization",
      "source_ref": "incident--e9cbffca-b09b-5c1b-8d57-a5957b458c48",
      "target_ref": "identity--8582fb96-90e9-5a81-8ff1-76245a2303ce",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Zeabur Inc.",
          "url": "https://zeabur.com/blogs/august-2026-security-incident",
          "external_id": "cit:c167c3ff-b32d-4495-8fff-b69fc419ef1f",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:b1084948e595a818e183464789b7c8d1b7bc8209251d68ec5e3db7569b1472ad"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--83061ca8-7577-5aa5-8fae-feedc139298c",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:3e50e765-ea10-4d2b-a775-35456fa29ddf",
      "relationship_type": "exposed-data-category",
      "source_ref": "incident--e9cbffca-b09b-5c1b-8d57-a5957b458c48",
      "target_ref": "x-ally-data-category--05e2e501-a627-5fd9-8973-d3d458231f93",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Zeabur Inc.",
          "url": "https://zeabur.com/blogs/august-2026-security-incident",
          "external_id": "cit:c3be8f89-ac58-4e58-aa12-022de1217774",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:b1084948e595a818e183464789b7c8d1b7bc8209251d68ec5e3db7569b1472ad"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--c53421bd-335c-5167-8b88-1282b2eabe35",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:b237094d-7d5d-4da0-9680-f353ab33d359",
      "relationship_type": "used-product",
      "source_ref": "incident--e9cbffca-b09b-5c1b-8d57-a5957b458c48",
      "target_ref": "software--65e06fae-cd24-50da-8b72-6a1cd4fbf1f5",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Zeabur Inc.",
          "url": "https://zeabur.com/blogs/august-2026-security-incident",
          "external_id": "cit:c19365f0-44f9-47b3-a65c-081ccf1fb88e",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:b1084948e595a818e183464789b7c8d1b7bc8209251d68ec5e3db7569b1472ad"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--fa2809eb-0f9a-5419-826e-d83d15aeb1cb",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:625cdcb4-bc77-4097-9d57-82005f2bf3e9",
      "relationship_type": "exploited-vulnerability",
      "source_ref": "incident--e9cbffca-b09b-5c1b-8d57-a5957b458c48",
      "target_ref": "vulnerability--5d423b7e-96a7-526e-83f7-28551f4f584e",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Zeabur Inc.",
          "url": "https://zeabur.com/blogs/august-2026-security-incident",
          "external_id": "cit:8a712de4-4ef6-4373-9b46-ed9bd18982bc",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:b1084948e595a818e183464789b7c8d1b7bc8209251d68ec5e3db7569b1472ad"
        }
      ]
    },
    {
      "type": "software",
      "spec_version": "2.1",
      "id": "software--65e06fae-cd24-50da-8b72-6a1cd4fbf1f5",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "prd:14fc42a8-7222-4e26-af17-e7804f84360e",
      "name": "NextChat"
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--5d423b7e-96a7-526e-83f7-28551f4f584e",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "vul:468dcc3f-72dc-4a56-a86c-34bd5934a7ba",
      "name": "CVE-2026-7644"
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--240fcafa-5055-547a-858f-e1a95d7f0187",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:cda00370-3b2b-43bf-8050-fc1c3867086e",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Zeabur Inc.",
          "url": "https://zeabur.com/changelogs/aihub-shutdown",
          "external_id": "cit:093b15a3-c182-4298-93d2-97089049ddd2",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:4279010a2509b67853c417ba0b1a6b3cb4438615761009c3d21359e27f3a96f6"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-09-22"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--30038056-5b50-52bd-8c19-73f65f2712a3",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:58ffb4e2-c733-4ca9-8f77-61726dbf6119",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Zeabur Inc.",
          "url": "https://zeabur.com/blogs/august-2026-security-incident",
          "external_id": "cit:152c2964-210a-4c76-8ecd-967c14e40c12",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:b1084948e595a818e183464789b7c8d1b7bc8209251d68ec5e3db7569b1472ad"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-08-28"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--50294c47-b15a-56f3-8cf6-7886385d10b4",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:438a0725-8055-457b-8877-e3dbcb701299",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Zeabur Inc.",
          "url": "https://zeabur.com/blogs/august-2026-security-incident",
          "external_id": "cit:7f7c19b4-3d3e-4dea-b8ab-9de9369cd4ad",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:b1084948e595a818e183464789b7c8d1b7bc8209251d68ec5e3db7569b1472ad"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The variables contained API keys, database passwords and other service credentials."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--50632c9d-e761-51df-894b-1704a3bc75b3",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:8da45ef3-cf5c-49e0-a51f-f23b168a6d24",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Zeabur Inc.",
          "url": "https://zeabur.com/blogs/august-2026-security-incident",
          "external_id": "cit:08d93545-6b90-48fa-85d1-3ccfe0e2e79b",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:b1084948e595a818e183464789b7c8d1b7bc8209251d68ec5e3db7569b1472ad"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Zeabur revoked legacy keys, rotated internal credentials and removed the shared cluster’s production access."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--5bc11e57-8c22-5cd6-8595-d75064d94afd",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:f42033a6-abca-4dfd-8920-78ed5df932b3",
      "confidence": 100,
      "external_references": [],
      "x_ally_claim_object": {
        "kind": "iri",
        "value": "https://attack.mitre.org/techniques/T1190/"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--6641f6f4-6136-55e5-8053-338224b4bc9d",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:f641bd00-6f7f-46a9-938c-bd77bc97d12a",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Zeabur Inc.",
          "url": "https://zeabur.com/blogs/august-2026-security-incident",
          "external_id": "cit:ff420def-4477-48ae-b9bf-8a824d0c14f0",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:b1084948e595a818e183464789b7c8d1b7bc8209251d68ec5e3db7569b1472ad"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Zeabur confirmed that attackers read production account information and project environment variables."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--7408e8db-a5e4-5466-8521-c785f77261c1",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:89aadf47-9916-417e-80fa-95445fb9c486",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Zeabur Inc.",
          "url": "https://zeabur.com/blogs/august-2026-security-incident",
          "external_id": "cit:8335bff4-b084-457c-816c-ac595c28a5e3",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:b1084948e595a818e183464789b7c8d1b7bc8209251d68ec5e3db7569b1472ad"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "A flaw in a public NextChat service enabled access; exposed platform and cloud credentials widened the compromise."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--8c235b46-6203-5c10-85e3-d5b07bdc3fbc",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:f3e6f6de-0ec3-43aa-8032-4c82b944d464",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Zeabur Inc.",
          "url": "https://zeabur.com/changelogs/aihub-shutdown",
          "external_id": "cit:f6704ca9-9b08-4e54-b4ca-3e519048fa35",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:4279010a2509b67853c417ba0b1a6b3cb4438615761009c3d21359e27f3a96f6"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Zeabur later discontinued AI Hub and returned unused balances as credits, with cash refunds available on request."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--955f668f-c289-5fd5-8e84-fb9c0139bfd9",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:887b3cfb-cc18-4c89-aad4-eba74c02da8e",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Zeabur Inc.",
          "url": "https://zeabur.com/blogs/august-2026-security-incident",
          "external_id": "cit:064d1728-0fe4-4871-84c6-97973f040e44",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:b1084948e595a818e183464789b7c8d1b7bc8209251d68ec5e3db7569b1472ad"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-08-27"
      }
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--05e2e501-a627-5fd9-8973-d3d458231f93",
      "created": "2026-08-09T01:12:00Z",
      "modified": "2026-08-09T01:12:00Z",
      "x_ally_original_id": "dat:7290ba39-bdce-4ff7-8087-56e370cd91c5",
      "name": "Account credentials"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--49cbe5ab-48e1-5302-8a7f-e7945cfbe37f",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "evt:dbf97b5b-4b82-4dba-8bdb-f2dba66cae41",
      "name": "AI Hub discontinued"
    }
  ]
}