Detection — anomalous API egress
SIEM alert on vendor integration; 2.3GB outbound to unknown host.
1 Jul 2026 · 08:12 · auto-detected
Triage & containment
API key revoked, vendor integration isolated. Severity set to Significant.
1 Jul 2026 · 09:40 · SOC Team
Early warning submitted
Art. 23 early warning filed with CSIRT within 11 hours.
1 Jul 2026 · 19:05 · CISO · 2 evidence attached
Forensic investigation in progress
Scope confirmed to a single vendor token; no customer PII confirmed yet.
2 Jul 2026 · 14:20 · Forensics
Incident notification (72h) — pending
Draft prepared by AURA · awaiting CISO sign-off