Evidence
← CASE-2024-APT-0001

The leaked CI credential AKIA-CI was used from Tor exit node 185.220.101.5 to read the prod-customer-data bucket.

supported
observedv1clm_62ec972ff724

Verdict

statussupported
engineevidence-verifier
digestsha256:d819ff1d1244db80b85597be872d89614a642afff7098b5f88ef04db00342ef1
verified_at2026-08-16T21:02:01.806Z

Evidence references

observationobs-001
supporting
unresolved
observationobs-003
supporting
unresolved
relationshiprel-002
supporting
unresolved
activity_chainchn-001
supporting
unresolved

Rule checks

reference-integrity4/4 references resolved
supporting-evidence-present4 resolved supporting reference(s)obs-001, obs-003, rel-002, chn-001
no-unresolved-supportall supporting references resolved
contradiction-scanno resolved contradicting evidence
classification-consistencyclassification OBSERVED consistent with evidence
temporal-consistencyall provided timestamps are well-formed

Version history

v12026-08-16

Receipts

verifysha256:96ea4557df66699ccc1e8df6df35cf9541c54decbe9e5df46051720418187c1d

Re-verify

POST /api/v1/claims/clm_62ec972ff724/verify
curl -sX POST https://evidence.platphormnews.com/api/v1/claims/clm_62ec972ff724/verify \
  -H "authorization: Bearer $PLATPHORM_API_KEY"