{
  "type": "bundle",
  "id": "bundle--f3ca114e-4ddb-5320-8785-a7adc1445a9b",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--6e5556e8-4abf-5eec-860f-d08e05500e12",
      "created": "2026-11-02T14:09:49.700573+00:00",
      "modified": "2026-11-02T14:09:49.700573+00:00",
      "x_ally_original_id": "org:e626f877-c26c-4ca6-9f80-fcab0f8a6e80",
      "name": "CodeSecure",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--3a60f506-244a-58df-87c5-be78b78780ac",
      "created": "2026-11-02T14:09:49.700573+00:00",
      "modified": "2026-11-02T14:09:49.700573+00:00",
      "x_ally_original_id": "brh:9714824f-93b4-4709-83dc-bd4eda9acb18",
      "name": "CodeSecure network data incident"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--9eda2c9d-92a3-56d4-8c6e-a4401469bed5",
      "created": "2026-11-02T14:09:49.700573+00:00",
      "modified": "2026-11-02T14:09:49.700573+00:00",
      "x_ally_original_id": "inc:e5690fb8-9ed6-4f37-b86d-99b5e2b70cf7",
      "name": "CodeSecure network data incident"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--426df3ba-b759-5ae5-885d-439f0d2f266d",
      "created": "2026-11-02T14:09:49.700573+00:00",
      "modified": "2026-11-02T14:09:49.700573+00:00",
      "x_ally_original_id": "clm:70153041-8754-4571-9db3-1460b0fd2e18",
      "relationship_type": "resulted-in",
      "source_ref": "incident--9eda2c9d-92a3-56d4-8c6e-a4401469bed5",
      "target_ref": "x-ally-event--fdbd1460-9e08-5300-8ec3-57a1be51be21",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Vermont Office of the Attorney General",
          "url": "https://ago.vermont.gov/categories/security-breach-notices",
          "external_id": "cit:6541e64a-3bb5-4a33-b955-643605c9b62d",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:55dd0848afca9b929b52ef2c6b11e8433cee8130690d2c2e30221503e651f2c7"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--7116af17-2f30-54c6-885f-511f3bf06e7e",
      "created": "2026-11-02T14:09:49.700573+00:00",
      "modified": "2026-11-02T14:09:49.700573+00:00",
      "x_ally_original_id": "clm:4fd97248-6136-4288-a3a0-d469dec5bba0",
      "relationship_type": "resulted-in",
      "source_ref": "incident--9eda2c9d-92a3-56d4-8c6e-a4401469bed5",
      "target_ref": "x-ally-event--376a0751-2adc-5868-8239-ead2454abcc0",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "CodeSecure",
          "url": "https://www.codesecure.com/",
          "external_id": "cit:69afa041-267e-47db-aab9-c45b041539a7",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:3289d293a0a2bde7341604cc0dd1fb299365e5971b0ba2ecab7668ff08b9082c"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--bf8776f0-906c-58e7-8834-c322cebb1129",
      "created": "2026-11-02T14:09:49.700573+00:00",
      "modified": "2026-11-02T14:09:49.700573+00:00",
      "x_ally_original_id": "clm:7817db27-2321-44aa-91aa-56c0b91daa95",
      "relationship_type": "resulted-in",
      "source_ref": "incident--9eda2c9d-92a3-56d4-8c6e-a4401469bed5",
      "target_ref": "x-ally-event--ffa3b6be-a3fe-5690-804c-929fcaa1b41d",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "CodeSecure",
          "url": "https://www.codesecure.com/",
          "external_id": "cit:e99a4168-1af4-4410-bb62-581a31e4c66d",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:3289d293a0a2bde7341604cc0dd1fb299365e5971b0ba2ecab7668ff08b9082c"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--f7105a08-a9b0-5380-8827-93253fa1377f",
      "created": "2026-11-02T14:09:49.700573+00:00",
      "modified": "2026-11-02T14:09:49.700573+00:00",
      "x_ally_original_id": "clm:fbaaf67e-9d1e-4cfa-9a4b-8314fa4f543e",
      "relationship_type": "affected-organization",
      "source_ref": "incident--9eda2c9d-92a3-56d4-8c6e-a4401469bed5",
      "target_ref": "identity--6e5556e8-4abf-5eec-860f-d08e05500e12",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "CodeSecure",
          "url": "https://www.codesecure.com/",
          "external_id": "cit:0c012536-eda2-4cfb-b5fa-21a2f4ef13e0",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:3289d293a0a2bde7341604cc0dd1fb299365e5971b0ba2ecab7668ff08b9082c"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--15c6419a-6ea7-52ac-82cc-b4317284472d",
      "created": "2026-11-02T14:09:49.700573+00:00",
      "modified": "2026-11-02T14:09:49.700573+00:00",
      "x_ally_original_id": "clm:dee9e270-f38a-44d6-889c-42a0dabee38a",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "CodeSecure",
          "url": "https://www.codesecure.com/",
          "external_id": "cit:7bcfa0f4-9d82-4405-9524-cae3efbd9130",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:3289d293a0a2bde7341604cc0dd1fb299365e5971b0ba2ecab7668ff08b9082c"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Potentially affected information varies by individual and may include names, addresses, dates of birth, Social Security numbers, driver’s license or passport information, medical or health-insurance information, financial accounts, and usernames and passwords."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--19b672a7-8312-50f1-874a-482215fdf2ae",
      "created": "2026-11-02T14:09:49.700573+00:00",
      "modified": "2026-11-02T14:09:49.700573+00:00",
      "x_ally_original_id": "clm:e1b3d26d-0a34-4fab-bb4c-d3fd8c67a5db",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "CodeSecure",
          "url": "https://www.codesecure.com/",
          "external_id": "cit:fde7e5d6-5d3b-4ba9-ac78-804adb1bd39f",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:3289d293a0a2bde7341604cc0dd1fb299365e5971b0ba2ecab7668ff08b9082c"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "As of its October 27 notice, CodeSecure said it was unaware of attempted or actual misuse or identity fraud involving the information."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--5a872c10-12ab-51cc-86b0-cc69a37ee1f7",
      "created": "2026-11-02T14:09:49.700573+00:00",
      "modified": "2026-11-02T14:09:49.700573+00:00",
      "x_ally_original_id": "clm:b8266692-b833-48ee-9a53-935cb27db3fc",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "CodeSecure",
          "url": "https://www.codesecure.com/",
          "external_id": "cit:6f6f8f1a-4a89-4548-9958-55933620a8a7",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:3289d293a0a2bde7341604cc0dd1fb299365e5971b0ba2ecab7668ff08b9082c"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2025-09-15"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--5b31bca2-0d12-54cf-84bc-33f95a98793c",
      "created": "2026-11-02T14:09:49.700573+00:00",
      "modified": "2026-11-02T14:09:49.700573+00:00",
      "x_ally_original_id": "clm:0dddfbc4-6a34-4330-ad97-819b032ad87c",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "CodeSecure",
          "url": "https://www.codesecure.com/",
          "external_id": "cit:80efbae8-5ee5-4698-81e2-6fc657113ecb",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:3289d293a0a2bde7341604cc0dd1fb299365e5971b0ba2ecab7668ff08b9082c"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "CodeSecure secured its systems, engaged forensic specialists, reviewed the affected information, implemented additional cybersecurity measures and offered complimentary credit monitoring in notification letters."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--8ea44bdd-2ee9-5487-8e78-91126a9d0a4d",
      "created": "2026-11-02T14:09:49.700573+00:00",
      "modified": "2026-11-02T14:09:49.700573+00:00",
      "x_ally_original_id": "clm:08fd90cd-255b-45e6-944d-6156acbc06bf",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "CodeSecure",
          "url": "https://www.codesecure.com/",
          "external_id": "cit:b6c6abb3-78a8-4ef2-9194-72e11ed9d540",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:3289d293a0a2bde7341604cc0dd1fb299365e5971b0ba2ecab7668ff08b9082c"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-27"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--b081acd0-736e-5dc3-820b-dc136ba5c947",
      "created": "2026-11-02T14:09:49.700573+00:00",
      "modified": "2026-11-02T14:09:49.700573+00:00",
      "x_ally_original_id": "clm:b2e1a3e4-0b1e-4612-b688-548bbd94e2ce",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "CodeSecure",
          "url": "https://www.codesecure.com/",
          "external_id": "cit:dd9587d7-a07f-4854-aafd-249e96c302d9",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:3289d293a0a2bde7341604cc0dd1fb299365e5971b0ba2ecab7668ff08b9082c"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "CodeSecure said an unauthorized actor accessed its systems on September 15, 2025 and viewed or copied certain information."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--b083ef63-cb01-5758-8c99-7f9f23b0a722",
      "created": "2026-11-02T14:09:49.700573+00:00",
      "modified": "2026-11-02T14:09:49.700573+00:00",
      "x_ally_original_id": "clm:bc0cf725-4fad-4b0d-88ce-1127e4c4a10d",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Vermont Office of the Attorney General",
          "url": "https://ago.vermont.gov/categories/security-breach-notices",
          "external_id": "cit:83ccf513-3c43-480f-afca-087592530270",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:55dd0848afca9b929b52ef2c6b11e8433cee8130690d2c2e30221503e651f2c7"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-28"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--e2cb705a-57ed-5a6c-8aec-e7e603c49bb6",
      "created": "2026-11-02T14:09:49.700573+00:00",
      "modified": "2026-11-02T14:09:49.700573+00:00",
      "x_ally_original_id": "clm:ee6bf43c-1beb-4c7c-84ac-2c049e5e2afd",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "CodeSecure",
          "url": "https://www.codesecure.com/",
          "external_id": "cit:c0c787a6-9308-4c8a-abfa-759e4acb0298",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:3289d293a0a2bde7341604cc0dd1fb299365e5971b0ba2ecab7668ff08b9082c"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-27"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--e633e760-9e42-57d4-8adc-fb251481a3dd",
      "created": "2026-11-02T14:09:49.700573+00:00",
      "modified": "2026-11-02T14:09:49.700573+00:00",
      "x_ally_original_id": "clm:c20a68eb-8e9c-47cc-804e-ff7b7c2f51aa",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "CodeSecure",
          "url": "https://www.codesecure.com/",
          "external_id": "cit:a8a0f78d-0ed7-4684-846e-2a0e526bb5ac",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:3289d293a0a2bde7341604cc0dd1fb299365e5971b0ba2ecab7668ff08b9082c"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2025-09-15"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--e78d2f83-be70-5ae2-8ca6-2e001d566c62",
      "created": "2026-11-02T14:09:49.700573+00:00",
      "modified": "2026-11-02T14:09:49.700573+00:00",
      "x_ally_original_id": "clm:4cbdf1e7-32c8-4fcd-b087-92ac8538340b",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Vermont Office of the Attorney General",
          "url": "https://ago.vermont.gov/categories/security-breach-notices",
          "external_id": "cit:0462b23e-eab6-476f-80cc-2203578ab138",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:55dd0848afca9b929b52ef2c6b11e8433cee8130690d2c2e30221503e651f2c7"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "integer",
        "value": 3,
        "unit": "individual"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--e91d31dd-a9d7-561d-8a4d-5e6537095527",
      "created": "2026-11-02T14:09:49.700573+00:00",
      "modified": "2026-11-02T14:09:49.700573+00:00",
      "x_ally_original_id": "clm:516262a3-ecd4-4d3d-abbf-bf914164eb84",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "CodeSecure",
          "url": "https://www.codesecure.com/",
          "external_id": "cit:71899467-0d97-40b4-b111-ab4a43810d5b",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:3289d293a0a2bde7341604cc0dd1fb299365e5971b0ba2ecab7668ff08b9082c"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "CodeSecure stated that the incident affected only its systems before technical integration with AdaCore."
      }
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--376a0751-2adc-5868-8239-ead2454abcc0",
      "created": "2026-11-02T14:09:49.700573+00:00",
      "modified": "2026-11-02T14:09:49.700573+00:00",
      "x_ally_original_id": "evt:657c164d-0c9c-44f6-b98b-312ff31684b7",
      "name": "Unauthorized systems access"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--fdbd1460-9e08-5300-8ec3-57a1be51be21",
      "created": "2026-11-02T14:09:49.700573+00:00",
      "modified": "2026-11-02T14:09:49.700573+00:00",
      "x_ally_original_id": "evt:6a2bd6f8-8a83-4b7b-a6e0-cf13c3e71e60",
      "name": "Vermont report recorded"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--ffa3b6be-a3fe-5690-804c-929fcaa1b41d",
      "created": "2026-11-02T14:09:49.700573+00:00",
      "modified": "2026-11-02T14:09:49.700573+00:00",
      "x_ally_original_id": "evt:854fd03d-feec-4994-98d9-91b891018ad0",
      "name": "Public notice published"
    },
    {
      "type": "x-ally-jurisdiction",
      "spec_version": "2.1",
      "id": "x-ally-jurisdiction--aa8d1125-39d2-547e-8e4f-efae4da767f8",
      "created": "2026-11-01T14:08:42.977581+00:00",
      "modified": "2026-11-01T14:08:42.977581+00:00",
      "x_ally_original_id": "jur:4c3314c3-0dbb-4f23-abbf-0e3ada4f1d96",
      "name": "Vermont"
    }
  ]
}