{
  "records": [
    {
      "vendor": "ACME",
      "date": "2025-11-03",
      "severity": "medium",
      "summary": "员工邮箱遭遇钓鱼攻击，未发现客户数据外泄。",
      "status": "closed",
      "source": "ACME 事件公告"
    },
    {
      "vendor": "NOVAPAY",
      "date": "2026-02-15",
      "severity": "high",
      "summary": "NovaPay 客户登录接口遭受撞库攻击：约 12,400 个登录会话被异常强制登录尝试，约 1,800 个会话被成功登录。NovaPay 在 2026-02-16 公开声明中称「未发现客户数据外泄」。Atrium Labs 已于 2026-04-10 出具独立调查报告（附件 B），结论为「未发现客户数据外泄的客观证据，但存在弱凭证复用风险」。事件状态为 closed。",
      "status": "closed",
      "investigation_report": "Atrium Labs 2026-04-10 独立调查报告（附件 B）；2026-04-25 已交付给客户信息安全部",
      "source": "NovaPay 2026-02-16 公开公告 + Atrium Labs 2026-04-10 调查报告",
      "url": "https://example.test/novapay/2026-02-credential-stuffing"
    }
  ]
}