{ "type": "bundle", "id": "bundle--f4a60347-32d7-57fa-8f46-4270ffc16cd4", "objects": [ { "type": "identity", "spec_version": "2.1", "id": "identity--8fae128e-590c-58e8-8e5b-5159bd3ee579", "created": "2026-08-09T04:28:21Z", "modified": "2026-08-09T04:28:21Z", "x_ally_original_id": "org:442002e6-272f-4cb0-a20b-013bdd7311ab", "name": "The Canada Life Assurance Company", "identity_class": "organization" }, { "type": "incident", "spec_version": "2.1", "id": "incident--235e8749-0878-5b5e-8981-70d7223a9042", "created": "2026-08-09T04:28:21Z", "modified": "2026-08-09T04:28:21Z", "x_ally_original_id": "inc:6c737132-0940-442c-ab77-4e9fbba10bc5", "name": "April 2026 Canada Life employee-account incident" }, { "type": "incident", "spec_version": "2.1", "id": "incident--715de882-48dc-581d-8d62-b5543e8e4ec8", "created": "2026-08-09T04:28:21Z", "modified": "2026-08-09T04:28:21Z", "x_ally_original_id": "brh:119b71c4-59be-49a6-8ff1-5776a4d9ee23", "name": "Canada Life employee-account data breach" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--004bc109-e61a-5afd-88e7-6bd3540c1803", "created": "2026-08-09T04:28:21Z", "modified": "2026-08-09T04:28:21Z", "x_ally_original_id": "clm:f667c3f3-9500-4ee0-ae74-82410ccc9068", "relationship_type": "exposed-data-category", "source_ref": "x-ally-data-exposure--699cfba5-5e35-50bf-840b-7a4d0b799c9e", "target_ref": "x-ally-data-category--7d2e510c-3773-582d-8952-ab532184f0b9", "confidence": 100, "external_references": [ { "source_name": "Have I Been Pwned", "url": "https://haveibeenpwned.com/api/v3/breach/CanadaLife", "external_id": "cit:9534bef9-2ec3-44ab-9bfc-489aa8142964", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:c14bcdce690804b234d73be5bfa5436741b0729b95a68555fb736ce1c806d858" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1673ec2a-a09d-51ff-8d52-dd6a525db3a5", "created": "2026-08-09T04:28:21Z", "modified": "2026-08-09T04:28:21Z", "x_ally_original_id": "clm:b5e69809-b18b-42c3-afb8-0ee9bfcba893", "relationship_type": "affected-organization", "source_ref": "x-ally-data-exposure--699cfba5-5e35-50bf-840b-7a4d0b799c9e", "target_ref": "identity--8fae128e-590c-58e8-8e5b-5159bd3ee579", "confidence": 100, "external_references": [ { "source_name": "The Canada Life Assurance Company", "url": "https://www.canadalife.com/about-us/news-highlights/news/canada-life-recently-identified-a-cyber-incident.html", "external_id": "cit:be3c4548-2ab2-4eeb-8139-bc44a94e5912", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:027e37498152f505b8b8d9a75fe606de2093d7e73e172a0119945dfe30fdbabd" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2b5e1c7a-0523-504f-8d17-3687489e15ac", "created": "2026-08-09T04:28:21Z", "modified": "2026-08-09T04:28:21Z", "x_ally_original_id": "clm:32d52926-284c-4fba-8e20-15a11bbd5e8f", "relationship_type": "affected-organization", "source_ref": "incident--235e8749-0878-5b5e-8981-70d7223a9042", "target_ref": "identity--8fae128e-590c-58e8-8e5b-5159bd3ee579", "confidence": 100, "external_references": [ { "source_name": "The Canada Life Assurance Company", "url": "https://www.canadalife.com/about-us/news-highlights/news/canada-life-recently-identified-a-cyber-incident.html", "external_id": "cit:8c0929e7-0f50-4f9c-810a-57314680ad73", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:027e37498152f505b8b8d9a75fe606de2093d7e73e172a0119945dfe30fdbabd" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3b770998-8585-503d-8de9-90abb1068560", "created": "2026-08-09T04:28:21Z", "modified": "2026-08-09T04:28:21Z", "x_ally_original_id": "clm:3d6c1191-9106-409d-ae89-66474e3cd577", "relationship_type": "resulted-in", "source_ref": "incident--235e8749-0878-5b5e-8981-70d7223a9042", "target_ref": "x-ally-data-exposure--699cfba5-5e35-50bf-840b-7a4d0b799c9e", "confidence": 100, "external_references": [ { "source_name": "The Canada Life Assurance Company", "url": "https://www.canadalife.com/about-us/news-highlights/news/canada-life-recently-identified-a-cyber-incident.html", "external_id": "cit:dc62f1b5-0fc6-4cc4-9e23-824a9112cd9f", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:027e37498152f505b8b8d9a75fe606de2093d7e73e172a0119945dfe30fdbabd" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--626594e6-e44b-5152-893d-c294eacab7f4", "created": "2026-08-09T04:28:21Z", "modified": "2026-08-09T04:28:21Z", "x_ally_original_id": "clm:f9956b5b-8777-4a1d-bade-dbec65177537", "relationship_type": "exposed-data-category", "source_ref": "x-ally-data-exposure--699cfba5-5e35-50bf-840b-7a4d0b799c9e", "target_ref": "x-ally-data-category--a2b7dd9d-0c02-5710-88ed-ea507d0ffa07", "confidence": 100, "external_references": [ { "source_name": "Have I Been Pwned", "url": "https://haveibeenpwned.com/api/v3/breach/CanadaLife", "external_id": "cit:20d309a1-0a19-4517-bda2-f4afb9f4a95f", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:c14bcdce690804b234d73be5bfa5436741b0729b95a68555fb736ce1c806d858" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a713595d-e185-5d9c-82a2-8cedd35c076f", "created": "2026-08-09T04:28:21Z", "modified": "2026-08-09T04:28:21Z", "x_ally_original_id": "clm:5b446d1a-472c-4292-97d5-f9f20c5aa855", "relationship_type": "exposed-data-category", "source_ref": "x-ally-data-exposure--699cfba5-5e35-50bf-840b-7a4d0b799c9e", "target_ref": "x-ally-data-category--772969d5-39f4-5aa9-8123-4f12a64d1594", "confidence": 100, "external_references": [ { "source_name": "Have I Been Pwned", "url": "https://haveibeenpwned.com/api/v3/breach/CanadaLife", "external_id": "cit:86e34036-680a-46ee-83ea-8079732abb86", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:c14bcdce690804b234d73be5bfa5436741b0729b95a68555fb736ce1c806d858" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ba700023-d77d-50ad-8e08-886b70b33e92", "created": "2026-08-09T04:28:21Z", "modified": "2026-08-09T04:28:21Z", "x_ally_original_id": "clm:c5f47375-5ca6-4af7-86b6-4443fda8f47f", "relationship_type": "resulted-in", "source_ref": "incident--235e8749-0878-5b5e-8981-70d7223a9042", "target_ref": "x-ally-notification--42005a67-484e-5db0-8dc0-1f471d7a3e20", "confidence": 100, "external_references": [ { "source_name": "The Canada Life Assurance Company", "url": "https://www.canadalife.com/about-us/news-highlights/news/canada-life-recently-identified-a-cyber-incident.html", "external_id": "cit:59861faf-668c-492a-9cf8-ecf87673cb21", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:027e37498152f505b8b8d9a75fe606de2093d7e73e172a0119945dfe30fdbabd" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d4ddf29d-69a8-53c6-8d95-b3e812d0f29b", "created": "2026-08-09T04:28:21Z", "modified": "2026-08-09T04:28:21Z", "x_ally_original_id": "clm:c826ba41-5a07-40b7-8e39-bbfed26617fc", "relationship_type": "exposed-data-category", "source_ref": "x-ally-data-exposure--699cfba5-5e35-50bf-840b-7a4d0b799c9e", "target_ref": "x-ally-data-category--c79f34f3-405d-57d2-8409-98eff3898231", "confidence": 100, "external_references": [ { "source_name": "Have I Been Pwned", "url": "https://haveibeenpwned.com/api/v3/breach/CanadaLife", "external_id": "cit:f859b7bc-9fd1-43a1-8c67-09fd138a61c7", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:c14bcdce690804b234d73be5bfa5436741b0729b95a68555fb736ce1c806d858" } ] }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--14c0c084-86b7-5532-880d-84f673f3b282", "created": "2026-08-09T04:28:21Z", "modified": "2026-08-09T04:28:21Z", "x_ally_original_id": "clm:ed88ab30-9830-4eb3-86f9-75cb1dbcf2e0", "confidence": 100, "external_references": [ { "source_name": "The Canada Life Assurance Company", "url": "https://www.canadalife.com/about-us/news-highlights/news/canada-life-recently-identified-a-cyber-incident.html", "external_id": "cit:3e035547-c1fa-4afe-aa52-733ca4e3c30a", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:027e37498152f505b8b8d9a75fe606de2093d7e73e172a0119945dfe30fdbabd" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "Canada Life's public assessment was that a small proportion of its customers may have been impacted; it did not publish an exact count in that statement." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--182d2b43-5a76-5868-856a-fcedd3928da5", "created": "2026-08-09T04:28:21Z", "modified": "2026-08-09T04:28:21Z", "x_ally_original_id": "clm:be18deb8-5841-486e-9517-785b1cfb7ab9", "confidence": 90, "external_references": [ { "source_name": "Have I Been Pwned", "url": "https://haveibeenpwned.com/api/v3/breach/CanadaLife", "external_id": "cit:1bd6633d-4b67-42a7-937f-a954db152c8b", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:c14bcdce690804b234d73be5bfa5436741b0729b95a68555fb736ce1c806d858" } ], "x_ally_claim_object": { "kind": "value", "datatype": "date", "value": "2026-04-20" } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--1d4b49ff-5919-5c12-884e-5d6ebf52fcf9", "created": "2026-08-09T04:28:21Z", "modified": "2026-08-09T04:28:21Z", "x_ally_original_id": "clm:81ca2dba-8478-4dfb-a172-1e99f851edf8", "confidence": 100, "external_references": [ { "source_name": "The Canada Life Assurance Company", "url": "https://www.canadalife.com/about-us/news-highlights/news/canada-life-recently-identified-a-cyber-incident.html", "external_id": "cit:bbab0fe9-21c5-45de-b4c3-9eedb02687df", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:027e37498152f505b8b8d9a75fe606de2093d7e73e172a0119945dfe30fdbabd" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "Canada Life said affected people would be contacted directly and offered no-cost credit monitoring protection." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--20f9c0b0-dd51-5ab8-8865-e846dbae311e", "created": "2026-08-09T04:28:21Z", "modified": "2026-08-09T04:28:21Z", "x_ally_original_id": "clm:ab7e1f01-2c9d-4b72-a83c-0d5d61d618d4", "confidence": 100, "external_references": [ { "source_name": "Have I Been Pwned", "url": "https://haveibeenpwned.com/api/v3/breach/CanadaLife", "external_id": "cit:382107b1-06f1-4cb0-87f8-bba7986100eb", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:c14bcdce690804b234d73be5bfa5436741b0729b95a68555fb736ce1c806d858" } ], "x_ally_claim_object": { "kind": "value", "datatype": "integer", "value": 237810, "unit": "record" } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--4aed0e4a-82c4-51c0-829b-5bf626402a88", "created": "2026-08-09T04:28:21Z", "modified": "2026-08-09T04:28:21Z", "x_ally_original_id": "clm:80623878-68b6-4613-b0a2-1be4777bf3a0", "confidence": 100, "external_references": [ { "source_name": "The Canada Life Assurance Company", "url": "https://www.canadalife.com/about-us/news-highlights/news/canada-life-recently-identified-a-cyber-incident.html", "external_id": "cit:5a65df3e-62df-40ab-a297-e4ed3e79d913", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:027e37498152f505b8b8d9a75fe606de2093d7e73e172a0119945dfe30fdbabd" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "Canada Life said it contained the incident, launched an immediate investigation with leading third-party cybersecurity experts, and notified authorities." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--619b7a8f-42e9-5cd2-8683-b9e6750fa5ef", "created": "2026-08-09T04:28:21Z", "modified": "2026-08-09T04:28:21Z", "x_ally_original_id": "clm:1b3b4b78-7608-4014-abc6-b7fbbfe6c556", "confidence": 100, "external_references": [ { "source_name": "The Canada Life Assurance Company", "url": "https://www.canadalife.com/about-us/news-highlights/news/canada-life-recently-identified-a-cyber-incident.html", "external_id": "cit:36b03507-551d-414c-bfa5-b6c6cf1a7ab7", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:027e37498152f505b8b8d9a75fe606de2093d7e73e172a0119945dfe30fdbabd" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "Canada Life reported unauthorized access to certain applications through an employee account." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--63a97425-44a4-5711-8027-177b8b28fa7f", "created": "2026-08-09T04:28:21Z", "modified": "2026-08-09T04:28:21Z", "x_ally_original_id": "clm:d3bac81d-fe92-488f-9420-b445c84e9383", "confidence": 100, "external_references": [ { "source_name": "The Canada Life Assurance Company", "url": "https://www.canadalife.com/about-us/news-highlights/news/canada-life-recently-identified-a-cyber-incident.html", "external_id": "cit:000142df-e6ef-4aea-88f7-218b84318754", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:027e37498152f505b8b8d9a75fe606de2093d7e73e172a0119945dfe30fdbabd" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "Canada Life said regular operations and services continued after containment." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--72aa5c74-acf4-516a-89eb-92944752d9cf", "created": "2026-08-09T04:28:21Z", "modified": "2026-08-09T04:28:21Z", "x_ally_original_id": "clm:c87cbb07-05ca-4c90-9f64-210462239f7f", "confidence": 100, "external_references": [ { "source_name": "The Canada Life Assurance Company", "url": "https://www.canadalife.com/about-us/news-highlights/news/canada-life-recently-identified-a-cyber-incident.html", "external_id": "cit:7ed82d81-4cee-42ff-924f-7157544c8d66", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:027e37498152f505b8b8d9a75fe606de2093d7e73e172a0119945dfe30fdbabd" } ], "x_ally_claim_object": { "kind": "value", "datatype": "date", "value": "2026-04-20" } }, { "type": "x-ally-data-category", "spec_version": "2.1", "id": "x-ally-data-category--772969d5-39f4-5aa9-8123-4f12a64d1594", "created": "2026-08-09T04:16:47Z", "modified": "2026-08-09T04:16:47Z", "x_ally_original_id": "dat:68fb21c1-b8d3-41b3-acf6-93b7fd596c53", "name": "Employment information" }, { "type": "x-ally-data-category", "spec_version": "2.1", "id": "x-ally-data-category--7d2e510c-3773-582d-8952-ab532184f0b9", "created": "2026-08-09T04:22:59Z", "modified": "2026-08-09T04:22:59Z", "x_ally_original_id": "dat:9d056b6a-1e01-4355-a828-41d9aaa63c9c", "name": "Customer service records" }, { "type": "x-ally-data-category", "spec_version": "2.1", "id": "x-ally-data-category--a2b7dd9d-0c02-5710-88ed-ea507d0ffa07", "created": "2026-08-08T23:12:00Z", "modified": "2026-08-08T23:12:00Z", "x_ally_original_id": "dat:559cf3f5-80c7-45ba-a930-ff0bfa8d17b0", "name": "Names" }, { "type": "x-ally-data-category", "spec_version": "2.1", "id": "x-ally-data-category--c79f34f3-405d-57d2-8409-98eff3898231", "created": "2026-08-08T23:12:00Z", "modified": "2026-08-08T23:12:00Z", "x_ally_original_id": "dat:5abcee7e-4a37-494a-b6ba-87ff46149be9", "name": "Contact information" }, { "type": "x-ally-data-exposure", "spec_version": "2.1", "id": "x-ally-data-exposure--699cfba5-5e35-50bf-840b-7a4d0b799c9e", "created": "2026-08-09T04:28:21Z", "modified": "2026-08-09T04:28:21Z", "x_ally_original_id": "exp:4df9d7d0-8f74-4df1-a490-70d797f21511", "name": "Canada Life customer and contact data exposure" }, { "type": "x-ally-notification", "spec_version": "2.1", "id": "x-ally-notification--42005a67-484e-5db0-8dc0-1f471d7a3e20", "created": "2026-08-09T04:28:21Z", "modified": "2026-08-09T04:28:21Z", "x_ally_original_id": "ntf:42116666-67e1-4cfe-8d21-7c97c504b007", "name": "Canada Life April 2026 incident disclosure and customer notification" } ] }