{
  "threats": [
    { "id": "THR-9831", "title": "Coordinated ticket-fraud ring targeting NFC East stadiums", "actor": "Telegram channel 'GateCrash'", "confidence": "high", "severity": "medium", "first_seen": "2026-03-22", "affected_venues": ["v_meridian", "v_axiom_arena"], "summary": "Ring selling re-printed tickets with cloned barcodes; pattern matches 2025 Northeast cluster.", "recommended_action": "Enable barcode re-use detection in Access; brief gate staff." },
    { "id": "THR-9832", "title": "Activist group planning disruption at Northbeacon all-hands", "actor": "Coalition for Algorithmic Justice (named, public)", "confidence": "high", "severity": "medium", "first_seen": "2026-04-01", "affected_venues": ["v_northbeacon_hq"], "summary": "Public organizing on Discord + X for lawful protest at main entrance during 4/15 event. No threat indicators against individuals.", "recommended_action": "Coordinate with local PD per pre-brief; protect lawful assembly; document." },
    { "id": "THR-9833", "title": "Doxxing campaign vs Northbeacon CFO and two VPs", "actor": "Pseudonymous account cluster", "confidence": "medium", "severity": "high", "first_seen": "2026-04-08", "affected_venues": ["v_northbeacon_hq", "v_northbeacon_lon"], "summary": "Home addresses + family info posted on three forums; no direct violent threat language but escalation pattern matches prior cases.", "recommended_action": "Activate executive-protection protocol; brief individuals; family residence detail TBD." },
    { "id": "THR-9834", "title": "ID-fraud ring active across LatAm hotel chains", "actor": "Unknown organized cluster", "confidence": "high", "severity": "medium", "first_seen": "2026-02-14", "affected_venues": ["v_ascend_polanco"], "summary": "Same 7 ID templates seen at 11 properties across 4 hotel groups in the last 60 days.", "recommended_action": "Enable cross-property ID hash matching; brief front-desk supervisors." },
    { "id": "THR-9835", "title": "Concert headliner — credible stalker re-emergence", "actor": "Named individual (sealed for legal)", "confidence": "high", "severity": "high", "first_seen": "2026-04-10", "affected_venues": ["v_axiom_arena", "v_meridian"], "summary": "Subject of 2023 restraining order has posted travel plans matching tour stops; LE notified.", "recommended_action": "Add to watchlist at affected venues; coordinate with artist tour security; LE liaison engaged." },
    { "id": "THR-9836", "title": "Festival — heat-illness risk elevated for Day 2", "actor": "Environmental (NOAA + EU MARS data)", "confidence": "high", "severity": "medium", "first_seen": "2026-04-13", "affected_venues": ["v_nordsom_main"], "summary": "Forecast 34°C with high humidity; prior-year same conditions produced 47 medical incidents.", "recommended_action": "Pre-stage extra medics and water stations; pre-write PA hydration messaging." },
    { "id": "THR-9837", "title": "Local liquor board sweep planned", "actor": "TABC (Texas)", "confidence": "medium", "severity": "low", "first_seen": "2026-04-12", "affected_venues": ["v_orchid_room"], "summary": "Pattern of inspections in Miami nightlife corridor over next 14 days, per public TABC schedule.", "recommended_action": "Confirm ID-scan logs current; brief door staff on documentation." }
  ]
}