{
 "type": "bundle",
 "id": "bundle--bb998dda-3380-4c49-a32b-349203b909fe",
 "objects": [
  {
   "type": "marking-definition",
   "spec_version": "2.1",
   "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9",
   "created": "2017-01-20T00:00:00.000Z",
   "definition_type": "tlp",
   "name": "TLP:WHITE",
   "definition": {
    "tlp": "white"
   }
  },
  {
   "type": "identity",
   "spec_version": "2.1",
   "id": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "created": "2026-11-10T00:00:00.000Z",
   "modified": "2026-11-10T00:00:00.000Z",
   "name": "SecurityStudies.info",
   "identity_class": "organization",
   "description": "Open-source security intelligence on Asia-Pacific. Incidents are detected by rules in the news unless marked curated."
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "incident",
   "id": "incident--c60aa734-7703-58e5-9153-f565285c2a0c",
   "created": "2026-11-10T16:32:08.783Z",
   "modified": "2026-11-13T00:02:47.806Z",
   "name": "AFP probing into alleged Air Force data breach",
   "description": "Detected automatically from 2 articles in 1 outlet (Philippine Daily Inquirer), Nov 10 to Nov 11, 2026. Type: data breach; sectors: defence. Asia-Pacific countries affected: Philippines. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
   "confidence": 15,
   "labels": [
    "data_breach",
    "detected-unreviewed"
   ],
   "external_references": [
    {
     "source_name": "securitystudies.info",
     "url": "https://securitystudies.info/cyber/incidents/afp-probing-into-alleged-air-force-data-breach-20261110/"
    },
    {
     "source_name": "Philippine Daily Inquirer",
     "url": "https://newsinfo.inquirer.net/2339099/afp-probing-into-alleged-air-force-data-breach",
     "description": "AFP probing into alleged Air Force data breach"
    },
    {
     "source_name": "Philippine Daily Inquirer",
     "url": "https://newsinfo.inquirer.net/2339430/afp-probes-alleged-data-breach-involving-air-force",
     "description": "AFP probes alleged data breach involving Air Force"
    }
   ],
   "x_securitystudies_occurred_on": "2026-11-10",
   "x_securitystudies_severity": 3,
   "x_securitystudies_status": "detected-unreviewed",
   "x_securitystudies_sectors": [
    "Defence"
   ],
   "x_securitystudies_eu_relevance": "medium"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "location",
   "id": "location--0d9b3799-93cc-5514-bcce-1b14ce539dc0",
   "created": "2026-11-10T00:00:00.000Z",
   "modified": "2026-11-10T00:00:00.000Z",
   "name": "Philippines",
   "country": "PH"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--e0a6d849-7f69-51e7-b275-77afd414026e",
   "created": "2026-11-10T16:32:08.783Z",
   "modified": "2026-11-10T16:32:08.783Z",
   "relationship_type": "related-to",
   "source_ref": "incident--c60aa734-7703-58e5-9153-f565285c2a0c",
   "target_ref": "location--0d9b3799-93cc-5514-bcce-1b14ce539dc0",
   "description": "affected country"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "incident",
   "id": "incident--f1476ab0-3323-5ac3-b877-7ff0d1f46d07",
   "created": "2026-11-10T16:32:07.738Z",
   "modified": "2026-11-10T16:40:20.181Z",
   "name": "LTFRB addresses security breach in online support platform",
   "description": "Detected automatically from 3 articles in 3 outlets (GMA Network, Philippine Daily Inquirer, The Manila Times), Sep 19 to Sep 20, 2026. Type: data breach; sectors: technology. Asia-Pacific countries affected: Philippines. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
   "confidence": 15,
   "labels": [
    "data_breach",
    "detected-unreviewed"
   ],
   "external_references": [
    {
     "source_name": "securitystudies.info",
     "url": "https://securitystudies.info/cyber/incidents/ltfrb-addresses-security-breach-in-online-support-platform-20260919/"
    },
    {
     "source_name": "The Manila Times",
     "url": "https://www.manilatimes.net/2026/09/19/news/ltfrb-addresses-security-breach-in-online-support-platform/2428770",
     "description": "LTFRB addresses security breach in online support platform"
    },
    {
     "source_name": "Philippine Daily Inquirer",
     "url": "https://newsinfo.inquirer.net/2308133/ltfrb-probes-data-breach-as-platform-goes-offline",
     "description": "LTFRB probes data breach as platform goes offline"
    },
    {
     "source_name": "GMA Network",
     "url": "https://www.gmanetwork.com/news/topstories/nation/1003007/ltfrb-platform-down-amid-security-breach-probe/story/",
     "description": "LTFRB platform down amid security breach probe"
    }
   ],
   "x_securitystudies_occurred_on": "2026-09-19",
   "x_securitystudies_severity": 2,
   "x_securitystudies_status": "detected-unreviewed",
   "x_securitystudies_sectors": [
    "Technology"
   ],
   "x_securitystudies_eu_relevance": "medium"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--08b0afc8-fe02-5675-8326-09abad2d8e8b",
   "created": "2026-11-10T16:32:07.738Z",
   "modified": "2026-11-10T16:32:07.738Z",
   "relationship_type": "related-to",
   "source_ref": "incident--f1476ab0-3323-5ac3-b877-7ff0d1f46d07",
   "target_ref": "location--0d9b3799-93cc-5514-bcce-1b14ce539dc0",
   "description": "affected country"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "incident",
   "id": "incident--f7d316db-381f-51e6-a4ea-729844292af2",
   "created": "2026-11-08T21:16:16.715Z",
   "modified": "2026-11-10T16:26:37.587Z",
   "name": "Qilin ransomware compromises the Philippine Ports Authority",
   "description": "The Philippine Ports Authority was compromised on 5 September 2026 in an intrusion attributed to the Qilin ransomware operation and subsequently added to the group's data-leak site as part of a double-extortion campaign. The victim sits squarely in the transportation and maritime logistics sector at a time of heightened South China Sea tension, giving the incident strategic as well as commercial significance. Qilin remained the most prolific ransomware brand globally in 2026, with more than 500 victims claimed during the year.",
   "confidence": 50,
   "labels": [
    "ransomware",
    "curated"
   ],
   "external_references": [
    {
     "source_name": "securitystudies.info",
     "url": "https://securitystudies.info/cyber/incidents/qilin-ransomware-compromises-the-philippine-ports-authority/"
    },
    {
     "source_name": "source",
     "url": "https://www.hookphish.com/blog/ransomware-group-qilin-hits-philippine-ports-authority/"
    },
    {
     "source_name": "source",
     "url": "https://ctiwatch.com/victims/0e550d65-88dc-4a3b-9d25-8d5d367e65e4-philippine-ports-authority"
    },
    {
     "source_name": "source",
     "url": "https://www.moxfive.com/blog/qilin-ransomware-2026-ttps-victims-and-defense-guide"
    }
   ],
   "x_securitystudies_occurred_on": "2026-09-05",
   "x_securitystudies_severity": 4,
   "x_securitystudies_status": "curated",
   "x_securitystudies_sectors": [
    "Transportation and Maritime",
    "Government"
   ],
   "x_securitystudies_eu_relevance": "medium"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--851892c9-c7f0-5d2e-9644-a4577e6c74b4",
   "created": "2026-11-08T21:16:16.715Z",
   "modified": "2026-11-08T21:16:16.715Z",
   "relationship_type": "related-to",
   "source_ref": "incident--f7d316db-381f-51e6-a4ea-729844292af2",
   "target_ref": "location--0d9b3799-93cc-5514-bcce-1b14ce539dc0",
   "description": "affected country"
  }
 ]
}