{
  "type": "bundle",
  "id": "bundle--d47d0b20-ae41-542c-8540-a1fc4d449b44",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--5cbe8571-1974-5e2a-844f-99d8751b29aa",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "org:33517017-6b0d-4a82-84ae-a973019ef519",
      "name": "Citizens Bank",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--623cc1fe-e991-5772-8dca-4f91c63a1777",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "inc:0e4298c7-519b-460e-8470-ea6df4e39eb6",
      "name": "Citizens Bank September 2026 personal-data access incident"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--c2dcdee5-b126-5676-8800-817d364d2939",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "brh:c27399dc-49c4-4f1f-b1b2-c373e6cc85f6",
      "name": "Citizens Bank September 2026 personal-data access incident"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--27dcf415-da88-5b7e-82d2-946700887341",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:0883b166-70a0-4bef-bcfc-ae200f412835",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--24fec597-ccc6-520b-8a8a-2d4eab51733f",
      "target_ref": "x-ally-data-category--ff2c8174-4feb-535f-8a4d-be23ee26eff2",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Citizens Bank",
          "url": "https://oag.ca.gov/system/files/Citizens%20Bank%20-%20Breach_Notice.pdf",
          "external_id": "cit:e62bc14a-eaf5-4793-9ed3-8e95bfe7e3dd",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:a82939f062b90a4cfc89b505a12304d0f0085df590adc13c307ab4ec832b7e90"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--46f81c31-d54e-57c2-8918-0860f6a24908",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:66af6a53-0ab6-4f4b-b450-cd7ea5741f85",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--24fec597-ccc6-520b-8a8a-2d4eab51733f",
      "target_ref": "x-ally-data-category--a2b7dd9d-0c02-5710-88ed-ea507d0ffa07",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Citizens Bank",
          "url": "https://oag.ca.gov/system/files/Citizens%20Bank%20-%20Breach_Notice.pdf",
          "external_id": "cit:30f191a8-3d88-4d91-b231-37019509872d",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:a82939f062b90a4cfc89b505a12304d0f0085df590adc13c307ab4ec832b7e90"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--5b7dfe8d-926c-5d89-818a-9aca5d65b88c",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:5158c332-4f67-4ef8-93dc-c2127e98a85f",
      "relationship_type": "resulted-in",
      "source_ref": "incident--623cc1fe-e991-5772-8dca-4f91c63a1777",
      "target_ref": "x-ally-data-exposure--24fec597-ccc6-520b-8a8a-2d4eab51733f",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Citizens Bank",
          "url": "https://oag.ca.gov/system/files/Citizens%20Bank%20-%20Breach_Notice.pdf",
          "external_id": "cit:6949fada-7f4c-4eb6-ae8d-4d7861ae6882",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:a82939f062b90a4cfc89b505a12304d0f0085df590adc13c307ab4ec832b7e90"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--c2e29960-2cc1-5c76-8047-2c9f0b93901d",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:408995a4-090c-4658-a00f-6799035e39c2",
      "relationship_type": "resulted-in",
      "source_ref": "incident--623cc1fe-e991-5772-8dca-4f91c63a1777",
      "target_ref": "x-ally-event--ac02de94-0934-5e68-8618-34b29d45d7da",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "California Department of Justice, Office of the Attorney General",
          "url": "https://oag.ca.gov/privacy/databreach/list",
          "external_id": "cit:332f469b-c87e-4d63-8c89-c58ab6c6a26f",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:0b0ab97c0c07b9151e40589e3361589e9a57e4c2e34ea115a4acfc3b354237ae"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--c7c140b5-9cfb-5e7a-86e2-8e80c6442f79",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:d2c8f3fc-5092-445c-9304-c03fe9d00b9b",
      "relationship_type": "affected-organization",
      "source_ref": "incident--623cc1fe-e991-5772-8dca-4f91c63a1777",
      "target_ref": "identity--5cbe8571-1974-5e2a-844f-99d8751b29aa",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Citizens Bank",
          "url": "https://oag.ca.gov/system/files/Citizens%20Bank%20-%20Breach_Notice.pdf",
          "external_id": "cit:05a2fa01-e8dc-47e5-81d2-3a3147a97a37",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:a82939f062b90a4cfc89b505a12304d0f0085df590adc13c307ab4ec832b7e90"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--ea765a94-37df-5c7b-8d26-1725cf0a8fe3",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:d8b751d2-5a2f-4b52-aaee-ec30922379e8",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--24fec597-ccc6-520b-8a8a-2d4eab51733f",
      "target_ref": "x-ally-data-category--c79f34f3-405d-57d2-8409-98eff3898231",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Citizens Bank",
          "url": "https://oag.ca.gov/system/files/Citizens%20Bank%20-%20Breach_Notice.pdf",
          "external_id": "cit:b370cb49-56ab-456b-80d1-0abdce30b554",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:a82939f062b90a4cfc89b505a12304d0f0085df590adc13c307ab4ec832b7e90"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--f6eb6794-8774-5604-893e-8211031796a3",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:117d8385-c029-4ad7-9217-550565405ad3",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--24fec597-ccc6-520b-8a8a-2d4eab51733f",
      "target_ref": "x-ally-data-category--ab430a0e-23bc-5177-814b-26f716196ca0",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Citizens Bank",
          "url": "https://oag.ca.gov/system/files/Citizens%20Bank%20-%20Breach_Notice.pdf",
          "external_id": "cit:305b0b00-f21e-478f-a7cf-44dbb2df5987",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:a82939f062b90a4cfc89b505a12304d0f0085df590adc13c307ab4ec832b7e90"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--fd040c2c-d56e-56a4-85dd-7fba4f83ef30",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:af516ec1-0bf9-4ea9-a246-82ec7e6d4a6f",
      "relationship_type": "resulted-in",
      "source_ref": "incident--623cc1fe-e991-5772-8dca-4f91c63a1777",
      "target_ref": "x-ally-event--810993d3-663d-5657-858f-b62b74e228a4",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Citizens Bank",
          "url": "https://oag.ca.gov/system/files/Citizens%20Bank%20-%20Breach_Notice.pdf",
          "external_id": "cit:cf780c64-f1f6-4c1f-82bd-f4cbdf7cf024",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:a82939f062b90a4cfc89b505a12304d0f0085df590adc13c307ab4ec832b7e90"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--0cd52ecc-448e-531b-88a0-17e187b7f85e",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:f59f82ab-9f35-40d3-82ef-302a48a51661",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Citizens Bank",
          "url": "https://oag.ca.gov/system/files/Citizens%20Bank%20-%20Breach_Notice.pdf",
          "external_id": "cit:2adffea6-acf0-4189-aaa5-4cab596e9b2c",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:a82939f062b90a4cfc89b505a12304d0f0085df590adc13c307ab4ec832b7e90"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Citizens said it fully remediated the issue and offered two years of credit monitoring through Equifax."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--57f4f3ed-81d6-58f4-80dc-b73903010716",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:0e4c35b6-6fbb-41c5-9c01-4cfd15036fbc",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "California Department of Justice, Office of the Attorney General",
          "url": "https://oag.ca.gov/privacy/databreach/list",
          "external_id": "cit:cb9fe06f-85b9-4873-9fd0-6f685f83bbad",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:0b0ab97c0c07b9151e40589e3361589e9a57e4c2e34ea115a4acfc3b354237ae"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-19"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--724307f9-7c6b-5a35-8538-943305c2ff2b",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:d3681bee-6610-4ba3-91ec-358ad3ac4ef9",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Citizens Bank",
          "url": "https://oag.ca.gov/system/files/Citizens%20Bank%20-%20Breach_Notice.pdf",
          "external_id": "cit:8e3dd4c1-829a-4337-a4ab-f3947cc3b44e",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:a82939f062b90a4cfc89b505a12304d0f0085df590adc13c307ab4ec832b7e90"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Citizens identified an issue that allowed an unauthorized third party to access some personal data."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--a21d3532-cf58-5caa-8361-18cf0e2de06d",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:376fc1ea-161c-4229-8e80-22fc9ac53fbf",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Citizens Bank",
          "url": "https://oag.ca.gov/system/files/Citizens%20Bank%20-%20Breach_Notice.pdf",
          "external_id": "cit:4c7f9fd9-61ff-4053-a6c5-7ca46ee47ee8",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:a82939f062b90a4cfc89b505a12304d0f0085df590adc13c307ab4ec832b7e90"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-09-10"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--cceb0273-2156-5ea8-8bba-40a41c12e225",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:90e792f6-b4aa-416b-9b62-bf9d9dbb31be",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Citizens Bank",
          "url": "https://oag.ca.gov/system/files/Citizens%20Bank%20-%20Breach_Notice.pdf",
          "external_id": "cit:fa07e34d-8595-4a51-bcd4-d866e6ec8b5c",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:a82939f062b90a4cfc89b505a12304d0f0085df590adc13c307ab4ec832b7e90"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-09-10"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--fff7cafd-13c7-509d-8131-e7b2f8a9dc7c",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:939698fe-23d2-4911-85d5-1c5a1611b790",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Citizens Bank",
          "url": "https://oag.ca.gov/system/files/Citizens%20Bank%20-%20Breach_Notice.pdf",
          "external_id": "cit:9ee1e4f7-1568-4457-917a-a2be331ca5ef",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:a82939f062b90a4cfc89b505a12304d0f0085df590adc13c307ab4ec832b7e90"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Citizens said it had no evidence customer data was examined or used maliciously and no knowledge of related identity theft or fraud."
      }
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--a2b7dd9d-0c02-5710-88ed-ea507d0ffa07",
      "created": "2026-08-08T23:12:00Z",
      "modified": "2026-08-08T23:12:00Z",
      "x_ally_original_id": "dat:559cf3f5-80c7-45ba-a930-ff0bfa8d17b0",
      "name": "Names"
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--ab430a0e-23bc-5177-814b-26f716196ca0",
      "created": "2026-08-08T23:12:00Z",
      "modified": "2026-08-08T23:12:00Z",
      "x_ally_original_id": "dat:fcd11f98-14a8-47ac-adea-68ad2985528f",
      "name": "Social Security numbers"
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--c79f34f3-405d-57d2-8409-98eff3898231",
      "created": "2026-08-08T23:12:00Z",
      "modified": "2026-08-08T23:12:00Z",
      "x_ally_original_id": "dat:5abcee7e-4a37-494a-b6ba-87ff46149be9",
      "name": "Contact information"
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--ff2c8174-4feb-535f-8a4d-be23ee26eff2",
      "created": "2026-08-08T23:12:00Z",
      "modified": "2026-08-08T23:12:00Z",
      "x_ally_original_id": "dat:ad54319a-bb47-40fb-be6c-7fd6e2aa1f68",
      "name": "Dates of birth"
    },
    {
      "type": "x-ally-data-exposure",
      "spec_version": "2.1",
      "id": "x-ally-data-exposure--24fec597-ccc6-520b-8a8a-2d4eab51733f",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "exp:0c827270-bff5-4ac0-bad4-29d434908f3d",
      "name": "Personal information described in the notification"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--810993d3-663d-5657-858f-b62b74e228a4",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "evt:f47867a3-52a2-4652-b4bf-140f72fc5144",
      "name": "Access issue identified"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--ac02de94-0934-5e68-8618-34b29d45d7da",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "evt:4d0dd330-d4c9-4ffd-82ee-59374b015114",
      "name": "California report recorded"
    }
  ]
}