{
  "type": "bundle",
  "id": "bundle--a6742277-d9f6-5342-8405-86639e0e3281",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--f22f370d-c63f-5a66-8ccf-c10d398487b6",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "org:da73586c-2735-43fc-a729-155e273a8de7",
      "name": "Central Ohio Primary Care Physicians, Inc.",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--27c9ae3d-9e1f-546b-851a-4d491f7c02fc",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "inc:fbd892d4-5d98-4d45-b8bc-e67e0d4dfec2",
      "name": "Central Ohio Primary Care vishing incident"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--dd38dca3-32fd-59b0-8347-a35dd6ac24fb",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "brh:1b7de735-0ce0-47af-8c60-f3c531eedfc5",
      "name": "Central Ohio Primary Care vishing incident"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--1a87c3f9-9321-56fd-814f-36281a7bfce4",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:003cb7d8-55ba-4ee3-9b04-f96c8622e278",
      "relationship_type": "affected-organization",
      "source_ref": "incident--27c9ae3d-9e1f-546b-851a-4d491f7c02fc",
      "target_ref": "identity--f22f370d-c63f-5a66-8ccf-c10d398487b6",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Central Ohio Primary Care Physicians, Inc.",
          "url": "https://oag.ca.gov/system/files/Central%20Ohio%20Primary%20Care-%20HIPAA%20Breach%20Notification%20INDIVIDUAL%20TEMPLATE%20%28ADULT%29%20v2__Static_Proof_R3%20%281%29.pdf",
          "external_id": "cit:999362ec-1d35-42c6-8c79-0e39da74875b",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:bd512c15850f9382a35e3aae708ce1d487e5c3aa782cf8efb951880378b6f24f"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--74b6e529-dd7f-562f-82f0-1b0e4e8d70bd",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:ec6f724d-218e-417e-889d-0b1540b51bd9",
      "relationship_type": "resulted-in",
      "source_ref": "incident--27c9ae3d-9e1f-546b-851a-4d491f7c02fc",
      "target_ref": "x-ally-event--5025d3f5-d0aa-567f-8387-5a3591b69dfa",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Central Ohio Primary Care Physicians, Inc.",
          "url": "https://oag.ca.gov/system/files/Central%20Ohio%20Primary%20Care-%20HIPAA%20Breach%20Notification%20INDIVIDUAL%20TEMPLATE%20%28ADULT%29%20v2__Static_Proof_R3%20%281%29.pdf",
          "external_id": "cit:14374cd5-d5d6-4a7e-8711-cb3d7cad1cd7",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:bd512c15850f9382a35e3aae708ce1d487e5c3aa782cf8efb951880378b6f24f"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--af746d81-02f7-5c66-80fd-e725701320af",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:4325ade4-7799-41f3-96ee-e444a149c5db",
      "relationship_type": "resulted-in",
      "source_ref": "incident--27c9ae3d-9e1f-546b-851a-4d491f7c02fc",
      "target_ref": "x-ally-event--42b51440-f27f-5bbb-8b87-1301c09b6e29",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Central Ohio Primary Care Physicians, Inc.",
          "url": "https://oag.ca.gov/system/files/Central%20Ohio%20Primary%20Care-%20HIPAA%20Breach%20Notification%20INDIVIDUAL%20TEMPLATE%20%28ADULT%29%20v2__Static_Proof_R3%20%281%29.pdf",
          "external_id": "cit:cf8b679b-7165-4759-a55a-de0a8ab1960e",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:bd512c15850f9382a35e3aae708ce1d487e5c3aa782cf8efb951880378b6f24f"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--05d633ff-b564-515c-8807-8ca26956c0ca",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:51638f1f-0613-47ac-bc98-654dd72418ed",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Central Ohio Primary Care Physicians, Inc.",
          "url": "https://oag.ca.gov/system/files/Central%20Ohio%20Primary%20Care-%20HIPAA%20Breach%20Notification%20INDIVIDUAL%20TEMPLATE%20%28ADULT%29%20v2__Static_Proof_R3%20%281%29.pdf",
          "external_id": "cit:2f5d40f5-236c-46c6-a73e-71d9de04848b",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:bd512c15850f9382a35e3aae708ce1d487e5c3aa782cf8efb951880378b6f24f"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-08-25"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--08018fee-66aa-5408-89d7-3c6b24559168",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:4b7f6ea6-6252-4c38-b77f-d96600e7457a",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Central Ohio Primary Care Physicians, Inc.",
          "url": "https://oag.ca.gov/system/files/Central%20Ohio%20Primary%20Care-%20HIPAA%20Breach%20Notification%20INDIVIDUAL%20TEMPLATE%20%28ADULT%29%20v2__Static_Proof_R3%20%281%29.pdf",
          "external_id": "cit:6c781d2c-ffec-4f3a-b852-58d507e82bd0",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:bd512c15850f9382a35e3aae708ce1d487e5c3aa782cf8efb951880378b6f24f"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "COPC took affected systems offline, engaged cybersecurity and legal specialists, worked with law enforcement and offered identity protection. It reported no known misuse at notification."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--1e3040f3-11f6-5025-8705-e38571cb9b91",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:f50d5ce3-47a0-4b16-ac91-0a8171d07def",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Central Ohio Primary Care Physicians, Inc.",
          "url": "https://oag.ca.gov/system/files/Central%20Ohio%20Primary%20Care-%20HIPAA%20Breach%20Notification%20INDIVIDUAL%20TEMPLATE%20%28ADULT%29%20v2__Static_Proof_R3%20%281%29.pdf",
          "external_id": "cit:a3c42e0d-a2b6-40a5-82c5-4cf24e104600",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:bd512c15850f9382a35e3aae708ce1d487e5c3aa782cf8efb951880378b6f24f"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-16"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--30d54666-059d-58f4-81bd-2dc03e1daeb6",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:fe411d0b-d93e-4400-bd75-9fa387e429b1",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Central Ohio Primary Care Physicians, Inc.",
          "url": "https://oag.ca.gov/system/files/Central%20Ohio%20Primary%20Care-%20HIPAA%20Breach%20Notification%20INDIVIDUAL%20TEMPLATE%20%28ADULT%29%20v2__Static_Proof_R3%20%281%29.pdf",
          "external_id": "cit:4409a56a-a580-4f94-93fa-a79758b31c68",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:bd512c15850f9382a35e3aae708ce1d487e5c3aa782cf8efb951880378b6f24f"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "COPC attributed entry to voice phishing, also called vishing, a social-engineering attack conducted by voice."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--735ce34f-2835-5bba-8c42-2a392ec89d84",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:f5897615-2107-4784-b382-f51b75113ab1",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Central Ohio Primary Care Physicians, Inc.",
          "url": "https://oag.ca.gov/system/files/Central%20Ohio%20Primary%20Care-%20HIPAA%20Breach%20Notification%20INDIVIDUAL%20TEMPLATE%20%28ADULT%29%20v2__Static_Proof_R3%20%281%29.pdf",
          "external_id": "cit:5ab4fd2e-ef7f-4987-b348-71662d210f11",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:bd512c15850f9382a35e3aae708ce1d487e5c3aa782cf8efb951880378b6f24f"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Potentially exposed information included names, addresses, Social Security numbers, patient identifiers, limited health data and financial information. COPC said MyChart was not breached and remained available."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--a18e13e3-68bd-5aac-83a9-9d369969764b",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:c931ba1e-7d05-4a41-94f4-0089ff1e4bc4",
      "confidence": 100,
      "external_references": [],
      "x_ally_claim_object": {
        "kind": "iri",
        "value": "https://attack.mitre.org/techniques/T1566/004/"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--e608a732-f8c7-549f-8d93-c44d600abbf3",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:e928d419-3406-4e22-8c31-d58ae9145eb9",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Central Ohio Primary Care Physicians, Inc.",
          "url": "https://oag.ca.gov/system/files/Central%20Ohio%20Primary%20Care-%20HIPAA%20Breach%20Notification%20INDIVIDUAL%20TEMPLATE%20%28ADULT%29%20v2__Static_Proof_R3%20%281%29.pdf",
          "external_id": "cit:d65cad7e-84a8-46c8-b653-69b9bb88e887",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:bd512c15850f9382a35e3aae708ce1d487e5c3aa782cf8efb951880378b6f24f"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-08-25"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--f1541e87-b9a0-5b46-8f11-a731ac429732",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:f96e02e6-76e4-4289-b9d6-38e2c27e9935",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Central Ohio Primary Care Physicians, Inc.",
          "url": "https://oag.ca.gov/system/files/Central%20Ohio%20Primary%20Care-%20HIPAA%20Breach%20Notification%20INDIVIDUAL%20TEMPLATE%20%28ADULT%29%20v2__Static_Proof_R3%20%281%29.pdf",
          "external_id": "cit:2a9d74a0-5556-4f1d-9b11-c3b9c5100d51",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:bd512c15850f9382a35e3aae708ce1d487e5c3aa782cf8efb951880378b6f24f"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Central Ohio Primary Care Physicians, Inc. discovered unauthorized access to sensitive patient files on August 25, 2026."
      }
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--42b51440-f27f-5bbb-8b87-1301c09b6e29",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "evt:4e6c4934-1d5e-4d7b-886a-83dd347250b6",
      "name": "Patient notification letter dated"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--5025d3f5-d0aa-567f-8387-5a3591b69dfa",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "evt:504a428a-51a1-497e-a7c2-f8ebeee12b94",
      "name": "Cybersecurity incident discovered"
    }
  ]
}