{
  "type": "bundle",
  "id": "bundle--29089b62-9cdd-5015-81b5-8b0044b3506f",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--eac621e1-f7d5-5dad-8b74-62f6a47c2eb4",
      "created": "2026-10-13T14:21:17.624648+00:00",
      "modified": "2026-10-13T14:21:17.624648+00:00",
      "x_ally_original_id": "org:d2925faa-5468-4260-9d67-575f6f8ec273",
      "name": "Blueberry Pediatrics",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--00f7e1a8-62ff-55bc-83f9-588e1fbc4d55",
      "created": "2026-10-13T14:21:17.624648+00:00",
      "modified": "2026-10-13T14:21:17.624648+00:00",
      "x_ally_original_id": "inc:fc06adc2-cfe1-4875-b95e-738e999645e1",
      "name": "Blueberry Pediatrics Metabase data breach"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--6623d018-6499-5447-8d42-9dcc2603b68a",
      "created": "2026-10-13T14:21:17.624648+00:00",
      "modified": "2026-10-13T14:21:17.624648+00:00",
      "x_ally_original_id": "brh:cfff0d9e-bcd6-48be-a576-9bd4a7f53ba8",
      "name": "Blueberry Pediatrics Metabase data breach"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--0c0af35c-a542-5359-81ac-ffb1c714a1aa",
      "created": "2026-10-13T14:21:17.624648+00:00",
      "modified": "2026-10-13T14:21:17.624648+00:00",
      "x_ally_original_id": "clm:69aa5115-fc8c-4fb2-9631-c15efe33b94b",
      "relationship_type": "used-product",
      "source_ref": "incident--00f7e1a8-62ff-55bc-83f9-588e1fbc4d55",
      "target_ref": "software--f5aaa094-f5d4-5cf0-8c66-18bf59f84ff7",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Blueberry Pediatrics",
          "url": "https://oag.ca.gov/system/files/Blueberry%20Template%20Consumer%20Notices.pdf",
          "external_id": "cit:9c9ac236-3d92-4474-9ff8-c73988c7bf63",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:83e1aa8d2e8129caefc827f351a1926b722855d5562f540b5c81dfd1043a4b67"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--32c8f83f-7915-5903-8be8-88a7bf69e959",
      "created": "2026-10-13T14:21:17.624648+00:00",
      "modified": "2026-10-13T14:21:17.624648+00:00",
      "x_ally_original_id": "clm:700517bd-3db2-4ada-9708-c75cde5c3e7b",
      "relationship_type": "resulted-in",
      "source_ref": "incident--00f7e1a8-62ff-55bc-83f9-588e1fbc4d55",
      "target_ref": "x-ally-event--7facfb8c-27b7-50f8-8bbc-ca085be6f326",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Blueberry Pediatrics",
          "url": "https://oag.ca.gov/system/files/Blueberry%20Template%20Consumer%20Notices.pdf",
          "external_id": "cit:f146f6f8-5ce9-4eb8-8e30-1929b945d194",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:83e1aa8d2e8129caefc827f351a1926b722855d5562f540b5c81dfd1043a4b67"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--e6bdc574-2add-52fd-820c-451bff06f130",
      "created": "2026-10-13T14:21:17.624648+00:00",
      "modified": "2026-10-13T14:21:17.624648+00:00",
      "x_ally_original_id": "clm:56769081-0c85-4ca9-9b8a-81ecfe66b345",
      "relationship_type": "affected-organization",
      "source_ref": "incident--00f7e1a8-62ff-55bc-83f9-588e1fbc4d55",
      "target_ref": "identity--eac621e1-f7d5-5dad-8b74-62f6a47c2eb4",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Blueberry Pediatrics",
          "url": "https://oag.ca.gov/system/files/Blueberry%20Template%20Consumer%20Notices.pdf",
          "external_id": "cit:31176cb1-43a2-49cc-b851-5e01b0feb57e",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:83e1aa8d2e8129caefc827f351a1926b722855d5562f540b5c81dfd1043a4b67"
        }
      ]
    },
    {
      "type": "software",
      "spec_version": "2.1",
      "id": "software--f5aaa094-f5d4-5cf0-8c66-18bf59f84ff7",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "prd:696e4661-bed7-4d3f-b5a6-9e2e31ab15a1",
      "name": "Metabase"
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--1ecf7304-34df-505b-8acd-c5c14c871bb2",
      "created": "2026-10-13T14:21:17.624648+00:00",
      "modified": "2026-10-13T14:21:17.624648+00:00",
      "x_ally_original_id": "clm:9cbf100c-85e0-47ff-ae8d-9c03500e906b",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Blueberry Pediatrics",
          "url": "https://oag.ca.gov/system/files/Blueberry%20Template%20Consumer%20Notices.pdf",
          "external_id": "cit:1711701d-7cef-40ad-856a-1ffa1cb272bc",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:83e1aa8d2e8129caefc827f351a1926b722855d5562f540b5c81dfd1043a4b67"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Potentially involved fields included names, health-plan and policy information, dates of birth, medical records, service dates, service codes and charges."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--2dec4930-5625-5f97-850d-b0efef1827cf",
      "created": "2026-10-13T14:21:17.624648+00:00",
      "modified": "2026-10-13T14:21:17.624648+00:00",
      "x_ally_original_id": "clm:4b98a40e-4b6e-475d-ade1-073e6eeca1f6",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Blueberry Pediatrics",
          "url": "https://oag.ca.gov/system/files/Blueberry%20Template%20Consumer%20Notices.pdf",
          "external_id": "cit:c5ad8bee-79cc-4e46-b4ce-1a9d71b36a9a",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:83e1aa8d2e8129caefc827f351a1926b722855d5562f540b5c81dfd1043a4b67"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Blueberry said separately stored patient photos and medically necessary videos were not compromised and Social Security numbers and payment information were not involved."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--3e4e4318-bc23-518c-85ce-a5f98bef3e20",
      "created": "2026-10-13T14:21:17.624648+00:00",
      "modified": "2026-10-13T14:21:17.624648+00:00",
      "x_ally_original_id": "clm:dec7887c-e65e-406e-97fa-45d1acb3ef16",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Blueberry Pediatrics",
          "url": "https://oag.ca.gov/system/files/Blueberry%20Template%20Consumer%20Notices.pdf",
          "external_id": "cit:372bcb8b-b0b0-453c-b039-9f9e2785764d",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:83e1aa8d2e8129caefc827f351a1926b722855d5562f540b5c81dfd1043a4b67"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-08-22"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--697c8468-fd6b-536c-8404-f50f7c2d7db7",
      "created": "2026-10-13T14:21:17.624648+00:00",
      "modified": "2026-10-13T14:21:17.624648+00:00",
      "x_ally_original_id": "clm:1458560e-2f4d-4406-8d40-2e82d6459179",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Blueberry Pediatrics",
          "url": "https://oag.ca.gov/system/files/Blueberry%20Template%20Consumer%20Notices.pdf",
          "external_id": "cit:4e504e2a-b931-4228-979b-e4c2d852ff6c",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:83e1aa8d2e8129caefc827f351a1926b722855d5562f540b5c81dfd1043a4b67"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Blueberry identified exploitation and blocked the unauthorized party within hours."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--e53f0e91-0032-5739-8cee-fc7141be9bbe",
      "created": "2026-10-13T14:21:17.624648+00:00",
      "modified": "2026-10-13T14:21:17.624648+00:00",
      "x_ally_original_id": "clm:381b0914-b3ec-4b14-8c0a-6176e255828f",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Blueberry Pediatrics",
          "url": "https://oag.ca.gov/system/files/Blueberry%20Template%20Consumer%20Notices.pdf",
          "external_id": "cit:94185754-f187-4085-908f-fcde1493a935",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:83e1aa8d2e8129caefc827f351a1926b722855d5562f540b5c81dfd1043a4b67"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Blueberry reported that an unauthorized party exploited a vulnerability in its Metabase instance and stole a copy of patient data."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--f831a1d6-95c9-507b-8a40-8c46ab044e94",
      "created": "2026-10-13T14:21:17.624648+00:00",
      "modified": "2026-10-13T14:21:17.624648+00:00",
      "x_ally_original_id": "clm:7a93f468-2a5c-429b-bc41-90b16a0e57f3",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Blueberry Pediatrics",
          "url": "https://oag.ca.gov/system/files/Blueberry%20Template%20Consumer%20Notices.pdf",
          "external_id": "cit:07c5fee5-bf5d-4f03-be02-d9655f6e094d",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:83e1aa8d2e8129caefc827f351a1926b722855d5562f540b5c81dfd1043a4b67"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Blueberry patched the vulnerability, changed system passwords and protocols, notified law enforcement and retained external forensic specialists."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--f8a6b772-d38f-55a1-82cb-af5d1de93f02",
      "created": "2026-10-13T14:21:17.624648+00:00",
      "modified": "2026-10-13T14:21:17.624648+00:00",
      "x_ally_original_id": "clm:23b4977f-6229-434a-823a-f1a2dfca7dd9",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Blueberry Pediatrics",
          "url": "https://oag.ca.gov/system/files/Blueberry%20Template%20Consumer%20Notices.pdf",
          "external_id": "cit:3ab6dbe1-422c-4d82-ba64-61cba32ec28f",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:83e1aa8d2e8129caefc827f351a1926b722855d5562f540b5c81dfd1043a4b67"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-08-22"
      }
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--7facfb8c-27b7-50f8-8bbc-ca085be6f326",
      "created": "2026-10-13T14:21:17.624648+00:00",
      "modified": "2026-10-13T14:21:17.624648+00:00",
      "x_ally_original_id": "evt:859a08b9-b85a-4381-9a39-0cec11152600",
      "name": "Blueberry discovers intrusion"
    }
  ]
}