{
 "type": "bundle",
 "id": "bundle--0dc421b5-3fc3-4788-b18b-135bafb99c10",
 "objects": [
  {
   "type": "marking-definition",
   "spec_version": "2.1",
   "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9",
   "created": "2017-01-20T00:00:00.000Z",
   "definition_type": "tlp",
   "name": "TLP:WHITE",
   "definition": {
    "tlp": "white"
   }
  },
  {
   "type": "identity",
   "spec_version": "2.1",
   "id": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "created": "2026-11-10T00:00:00.000Z",
   "modified": "2026-11-10T00:00:00.000Z",
   "name": "SecurityStudies.info",
   "identity_class": "organization",
   "description": "Open-source security intelligence on Asia-Pacific. Incidents are detected by rules in the news unless marked curated."
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "incident",
   "id": "incident--886dc369-da7a-5eb5-9539-82519eab05eb",
   "created": "2026-11-08T21:16:16.700Z",
   "modified": "2026-11-10T16:26:37.587Z",
   "name": "Quest Aparthotel Chain Exposes Guest PII via Third-Party Breach",
   "description": "Australian aparthotel chain Quest, which operates more than 120 properties across Australia, New Zealand and Fiji, disclosed unauthorised access to a database run by a third-party service provider, detected on 17 August 2026. Exposed guest records from before June 2025 included full names, email and contact details, and dates of birth in a small number of records.",
   "confidence": 50,
   "labels": [
    "data_breach",
    "curated"
   ],
   "external_references": [
    {
     "source_name": "securitystudies.info",
     "url": "https://securitystudies.info/cyber/incidents/quest-aparthotel-chain-exposes-guest-pii-via-third-party-breach/"
    },
    {
     "source_name": "source",
     "url": "https://www.theregister.com/cyber-crime/2026/08/19/australian-hotel-chain-leaks-guests-pii-after-breach-at-third-party-database-operator/5289341"
    }
   ],
   "x_securitystudies_occurred_on": "2026-08-17",
   "x_securitystudies_severity": 2,
   "x_securitystudies_status": "curated",
   "x_securitystudies_sectors": [
    "hospitality"
   ],
   "x_securitystudies_eu_relevance": "low"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "location",
   "id": "location--982fc425-3b6a-5dbb-9934-af733bbc405c",
   "created": "2026-11-10T00:00:00.000Z",
   "modified": "2026-11-10T00:00:00.000Z",
   "name": "Australia",
   "country": "AU"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--a1dbc73a-c492-54a4-8580-26e002a7c1ab",
   "created": "2026-11-08T21:16:16.700Z",
   "modified": "2026-11-08T21:16:16.700Z",
   "relationship_type": "related-to",
   "source_ref": "incident--886dc369-da7a-5eb5-9539-82519eab05eb",
   "target_ref": "location--982fc425-3b6a-5dbb-9934-af733bbc405c",
   "description": "affected country"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "location",
   "id": "location--6e0bbb2b-f502-57ac-b1f5-25e3061c30a8",
   "created": "2026-11-10T00:00:00.000Z",
   "modified": "2026-11-10T00:00:00.000Z",
   "name": "New Zealand",
   "country": "NZ"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--ec9bdd9d-c835-5122-bf1d-a7f11134c36c",
   "created": "2026-11-08T21:16:16.700Z",
   "modified": "2026-11-08T21:16:16.700Z",
   "relationship_type": "related-to",
   "source_ref": "incident--886dc369-da7a-5eb5-9539-82519eab05eb",
   "target_ref": "location--6e0bbb2b-f502-57ac-b1f5-25e3061c30a8",
   "description": "country named in the coverage"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "location",
   "id": "location--6c5e711a-8a33-5240-b0a3-6c917d821bc0",
   "created": "2026-11-10T00:00:00.000Z",
   "modified": "2026-11-10T00:00:00.000Z",
   "name": "Fiji",
   "country": "FJ"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--d1f94613-a2da-5e0b-9f1c-6bc655a2e3ff",
   "created": "2026-11-08T21:16:16.700Z",
   "modified": "2026-11-08T21:16:16.700Z",
   "relationship_type": "related-to",
   "source_ref": "incident--886dc369-da7a-5eb5-9539-82519eab05eb",
   "target_ref": "location--6c5e711a-8a33-5240-b0a3-6c917d821bc0",
   "description": "country named in the coverage"
  }
 ]
}