{
  "type": "bundle",
  "id": "bundle--5db62149-48f3-51a6-8da4-2e4f3ad60eae",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--b0539184-5f74-57fe-8bb2-832d2eba2bcb",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "org:ebb4d436-e4e0-5d40-ab10-96de3f179fe9",
      "name": "Coinbase",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--e7626f25-b1c2-58e4-8a82-0ebebe1f0bf6",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "inc:1fcc9b9a-f800-5c09-8e77-8f735cef564d",
      "name": "Coinbase security incident"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--e9d50797-3154-58de-8915-f63e47269765",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "brh:07243dde-1867-5e13-9534-d3f40111a4d2",
      "name": "Coinbase security incident"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--75195e3b-015f-5b1a-80ac-06dc404b347f",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "clm:af41efd1-e710-56bd-ab5b-d162b3755b9b",
      "relationship_type": "affected-organization",
      "source_ref": "incident--e7626f25-b1c2-58e4-8a82-0ebebe1f0bf6",
      "target_ref": "identity--b0539184-5f74-57fe-8bb2-832d2eba2bcb",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "U.S. Securities and Exchange Commission",
          "url": "https://www.sec.gov/Archives/edgar/data/1679788/000167978825000094/coin-20250514.htm",
          "external_id": "cit:c5d1ce29-e51c-582a-a1ba-2ef37e952f29",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:06e1b388726d43df512046aa06641278d8c996ebc710f83d060d8f5f23e72b04"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--8747c72c-d56b-5d34-89d1-37411f507c19",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:b7708894-da93-5887-b211-5d5bf1c3f174",
      "confidence": 92,
      "external_references": [
        {
          "source_name": "U.S. Securities and Exchange Commission",
          "url": "https://www.sec.gov/Archives/edgar/data/1679788/000167978825000094/coin-20250514.htm",
          "external_id": "cit:23b7ca1e-98f6-5981-8363-9ea74f38d141",
          "description": "Based on the information available to the Company on the date hereof and based on facts that continue to evolve, the Company has preliminarily estimated expenses to be within the range of approximately $180 million to $400 million relating to remediation costs and voluntary customer reimbursements relating to this Incident, prior to further review of potential losses, indemnification claims, and potential recoveries, which could meaningfully increase or decrease this estimate.",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:06e1b388726d43df512046aa06641278d8c996ebc710f83d060d8f5f23e72b04"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Est. $180-400M remediation/reimbursement cost."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--98a94221-906b-55df-8863-49f912c5a500",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:57bd4ff3-a108-54b3-81aa-e00fc9d0fd1e",
      "confidence": 90,
      "external_references": [
        {
          "source_name": "U.S. Securities and Exchange Commission",
          "url": "https://www.sec.gov/Archives/edgar/data/1679788/000167978825000094/coin-20250514.htm",
          "external_id": "cit:f14ae1b2-7e33-5fdf-bb71-ef8ce9f26861",
          "description": "The Company has not paid the threat actor’s demand and is cooperating with law enforcement in the investigation of this Incident.",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:06e1b388726d43df512046aa06641278d8c996ebc710f83d060d8f5f23e72b04"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The retained source reports coordination with law enforcement as part of the incident response."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--a92aedc8-35e3-531d-8730-84628fa29808",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "clm:18fd8649-6488-58ea-b8ff-c13f19982e76",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "U.S. Securities and Exchange Commission",
          "url": "https://www.sec.gov/Archives/edgar/data/1679788/000167978825000094/coin-20250514.htm",
          "external_id": "cit:bc78b885-a957-5a2e-b7c2-dc581f13d86b",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:06e1b388726d43df512046aa06641278d8c996ebc710f83d060d8f5f23e72b04"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The reviewed source documents the coinbase security incident involving Coinbase."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--dc00e414-9345-5732-8449-1d3d278d3062",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:f9c04406-e566-51e8-8392-0dbb5bec8155",
      "confidence": 85,
      "external_references": [
        {
          "source_name": "U.S. Securities and Exchange Commission",
          "url": "https://www.sec.gov/Archives/edgar/data/1679788/000167978825000094/coin-20250514.htm",
          "external_id": "cit:56dc9ae3-bc8a-5a24-95d8-639047298bfa",
          "description": "•Limited corporate data (including documents, training material, and communications available to support agents).",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:06e1b388726d43df512046aa06641278d8c996ebc710f83d060d8f5f23e72b04"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Insider threat: bribed overseas contracted customer-support agents exported customer data."
      }
    }
  ]
}