{
 "type": "bundle",
 "id": "bundle--2e0b5270-bcfa-4881-8433-cde9c8d10932",
 "objects": [
  {
   "type": "marking-definition",
   "spec_version": "2.1",
   "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9",
   "created": "2017-01-20T00:00:00.000Z",
   "definition_type": "tlp",
   "name": "TLP:WHITE",
   "definition": {
    "tlp": "white"
   }
  },
  {
   "type": "identity",
   "spec_version": "2.1",
   "id": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "created": "2026-11-10T00:00:00.000Z",
   "modified": "2026-11-10T00:00:00.000Z",
   "name": "SecurityStudies.info",
   "identity_class": "organization",
   "description": "Open-source security intelligence on Asia-Pacific. Incidents are detected by rules in the news unless marked curated."
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "incident",
   "id": "incident--2ceaa6d1-4431-5d21-9dce-b5562b5f35f0",
   "created": "2026-11-08T21:16:16.714Z",
   "modified": "2026-11-10T16:26:37.587Z",
   "name": "Vietnam-linked APIS database exposes 220.8 million passenger and crew records",
   "description": "Kinryu Labs discovered an unsecured Elasticsearch cluster named 'pax-info' hosted on Viettel-assigned IP space in Hanoi containing 220.8 million Advance Passenger Information System records across 29 indices and roughly 107GB. Exposed fields included names, dates of birth, nationalities, passport and travel-document numbers, flight numbers, airline details, seat assignments and baggage references, covering January 2017 to April 2026. The operator could not be definitively identified; researchers notified Vietnamese authorities, airlines and national CERTs on 3 June and the database was secured by 8 June, with public disclosure following on 8 September. Affected travellers span Asia-Pacific, Europe and the Middle East, and absent server logs no conclusion could be drawn on prior theft.",
   "confidence": 50,
   "labels": [
    "data_breach",
    "curated"
   ],
   "external_references": [
    {
     "source_name": "securitystudies.info",
     "url": "https://securitystudies.info/cyber/incidents/vietnam-linked-apis-database-exposes-2208-million-passenger-and-crew-records/"
    },
    {
     "source_name": "source",
     "url": "https://securityaffairs.com/198671/data-breach/massive-vietnam-linked-apis-database-exposes-passport-and-flight-data.html"
    }
   ],
   "x_securitystudies_occurred_on": "2026-06-03",
   "x_securitystudies_severity": 5,
   "x_securitystudies_status": "curated",
   "x_securitystudies_sectors": [
    "Transportation and Aviation",
    "Government"
   ],
   "x_securitystudies_eu_relevance": "medium"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "location",
   "id": "location--0db555ff-32c2-502e-b17e-a5deb6a6218d",
   "created": "2026-11-10T00:00:00.000Z",
   "modified": "2026-11-10T00:00:00.000Z",
   "name": "Vietnam",
   "country": "VN"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--ba776272-c8ee-5233-8ce0-0bdda217900a",
   "created": "2026-11-08T21:16:16.714Z",
   "modified": "2026-11-08T21:16:16.714Z",
   "relationship_type": "related-to",
   "source_ref": "incident--2ceaa6d1-4431-5d21-9dce-b5562b5f35f0",
   "target_ref": "location--0db555ff-32c2-502e-b17e-a5deb6a6218d",
   "description": "affected country"
  }
 ]
}