{
  "type": "bundle",
  "id": "bundle--68a39812-56cf-55ea-80f6-37f29bf4637a",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--73ad8c75-05ee-5ad4-8813-557f59fa154e",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "org:b1efd2e1-e3f7-4709-952f-9c1afbb8584d",
      "name": "Aesto, LLC",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--03d8401f-7e46-5bf4-82eb-d99234530730",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "brh:764c5c13-d815-4280-80da-9917938dcd50",
      "name": "Aesto Health cloud-data incident"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--824d43bd-a3fe-5086-8808-29ee0da5a6d2",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "inc:b43d01ce-543b-4421-ab93-d1e1de96c2a7",
      "name": "Aesto Health cloud-data incident"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--59daf898-d066-5dbe-8677-fbbcc5872120",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:5f959616-ef75-4eda-8dd4-3b1db2afae33",
      "relationship_type": "affected-organization",
      "source_ref": "incident--824d43bd-a3fe-5086-8808-29ee0da5a6d2",
      "target_ref": "identity--73ad8c75-05ee-5ad4-8813-557f59fa154e",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Aesto, LLC",
          "url": "https://oag.ca.gov/system/files/Notification%20Template%20Letter%20for%20Aesto%20Regulator%20Notices_Redacted.pdf",
          "external_id": "cit:44b2e78d-8bfe-4f2d-bdc0-89109bfdddcd",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:307f23232bce4338da8c457ecd1287bb3ca70f73d7abb7b2bd46e7336837a1a5"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--972750ee-db33-516c-80f0-160748ba8e32",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:f5553ae2-6c6a-449d-ac31-45da53530f00",
      "relationship_type": "resulted-in",
      "source_ref": "incident--824d43bd-a3fe-5086-8808-29ee0da5a6d2",
      "target_ref": "x-ally-event--df532e95-2ac1-57c5-8c63-6e7f0578a1a8",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Aesto, LLC",
          "url": "https://oag.ca.gov/system/files/Notification%20Template%20Letter%20for%20Aesto%20Regulator%20Notices_Redacted.pdf",
          "external_id": "cit:92f8e75b-39c3-4abb-a577-c08a3dbea3e7",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:307f23232bce4338da8c457ecd1287bb3ca70f73d7abb7b2bd46e7336837a1a5"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--07640f02-2db4-523f-8403-47cdcddeb2d2",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:5f4418ee-d5fc-46c9-8263-78f59c65bb41",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Aesto, LLC",
          "url": "https://oag.ca.gov/system/files/Notification%20Template%20Letter%20for%20Aesto%20Regulator%20Notices_Redacted.pdf",
          "external_id": "cit:17b43026-de8f-4c1d-bd3c-2d32f462e2bb",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:307f23232bce4338da8c457ecd1287bb3ca70f73d7abb7b2bd46e7336837a1a5"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The notification template identifies names but leaves other affected fields and healthcare-provider identities variable. It does not establish a total affected population."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--13601a53-66f6-5190-824e-92b81fa8332b",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:5d92d34b-be7e-43f0-a019-d9a76a6f49ee",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Aesto, LLC",
          "url": "https://oag.ca.gov/system/files/Notification%20Template%20Letter%20for%20Aesto%20Regulator%20Notices_Redacted.pdf",
          "external_id": "cit:6a3982ef-ce18-4270-88db-14b0743733a4",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:307f23232bce4338da8c457ecd1287bb3ca70f73d7abb7b2bd46e7336837a1a5"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-05-26"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--3c940812-1e8c-5acf-87d4-db4592572e0e",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:c8a84653-8e6c-44e6-bb0f-ebd67ecd075e",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Aesto, LLC",
          "url": "https://oag.ca.gov/system/files/Notification%20Template%20Letter%20for%20Aesto%20Regulator%20Notices_Redacted.pdf",
          "external_id": "cit:3c96e789-1b9d-4a31-a513-0581453a0421",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:307f23232bce4338da8c457ecd1287bb3ca70f73d7abb7b2bd46e7336837a1a5"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Aesto, LLC reported a security incident affecting part of its Amazon Web Services infrastructure around December 18, 2025."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--5c073ffb-3756-5da3-8c59-aaad021fc71a",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:c37bc383-0e2f-4b16-9da9-006967d3d791",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Aesto, LLC",
          "url": "https://oag.ca.gov/system/files/Notification%20Template%20Letter%20for%20Aesto%20Regulator%20Notices_Redacted.pdf",
          "external_id": "cit:9b562e8e-762e-4656-a15f-119468f24e5a",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:307f23232bce4338da8c457ecd1287bb3ca70f73d7abb7b2bd46e7336837a1a5"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Aesto engaged outside cybersecurity specialists, investigated and reviewed documents, and offered identity monitoring. It reported no evidence of misuse."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--d806ab8e-491a-51c8-8c48-1058839afc44",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:a0709291-6bb9-4a84-b98d-248f5cf62d65",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Aesto, LLC",
          "url": "https://oag.ca.gov/system/files/Notification%20Template%20Letter%20for%20Aesto%20Regulator%20Notices_Redacted.pdf",
          "external_id": "cit:d562b863-edf7-4048-89fb-7eb31a8a9dde",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:307f23232bce4338da8c457ecd1287bb3ca70f73d7abb7b2bd46e7336837a1a5"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "On May 26, 2026, Aesto concluded that personal information may have been accessed or acquired between December 2 and December 18, 2025."
      }
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--df532e95-2ac1-57c5-8c63-6e7f0578a1a8",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "evt:61231a37-57f2-4d90-9478-915bd6e10f2a",
      "name": "Potential data impact confirmed"
    }
  ]
}
