diff --git a/backend/app/services/attck_evaluations_service.py b/backend/app/services/attck_evaluations_service.py
index 90ec6b2..c262563 100644
--- a/backend/app/services/attck_evaluations_service.py
+++ b/backend/app/services/attck_evaluations_service.py
@@ -240,8 +240,24 @@ def fetch_results_for_adversary(adversary_name: str) -> list[dict[str, Any]]:
         logger.error("Failed to fetch ATT&CK Evaluations results: %s", exc)
         raise
 
-    # Find the adversary in the response
-    adversaries = data.get("adversaries", [])
+    # The results endpoint returns a LIST of vendor objects:
+    # [{"name": "crowdstrike", "adversaries": [{"Adversary_Name": "apt3", ...}, ...]}, ...]
+    # (not a dict — hence the explicit vendor lookup below)
+    if isinstance(data, list):
+        vendor_entry = next(
+            (v for v in data if isinstance(v, dict) and v.get("name", "").lower() == _VENDOR),
+            None,
+        )
+        if not vendor_entry:
+            raise ValueError(
+                f"Vendor '{_VENDOR}' not found in results response. "
+                f"Available vendors: {[v.get('name') for v in data if isinstance(v, dict)]}"
+            )
+        adversaries = vendor_entry.get("adversaries", [])
+    else:
+        # Fallback for legacy dict-shaped response (just in case API changes again)
+        adversaries = data.get("adversaries", [])
+
     target = next(
         (a for a in adversaries if a.get("Adversary_Name", "").lower() == adversary_name.lower()),
         None,