{
  "type": "bundle",
  "id": "bundle--e064d56a-eb2d-5233-85d2-e90e15954322",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--94f3f39e-419a-51b1-8726-0d1fd5202f7f",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "org:3438d9a5-a9f8-52cd-b748-c43c996ab95b",
      "name": "CommonSpirit Health",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--1ec5af8e-0491-51bd-8964-4dbc2aca0a26",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "inc:08ff6bf0-a2fc-598d-a0bf-94f9aff88486",
      "name": "CommonSpirit Health security incident"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--5bf8ed6d-3ab9-54bf-8e5e-9451159582b6",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "brh:fec136b8-fc6a-52b9-8295-6d8ce7b81e32",
      "name": "CommonSpirit Health security incident"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--540a75f2-794a-55fa-873d-209e8121930b",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "clm:5fc22af7-8568-5fd4-a9fe-6e0cfaf4bfb4",
      "relationship_type": "affected-organization",
      "source_ref": "incident--1ec5af8e-0491-51bd-8964-4dbc2aca0a26",
      "target_ref": "identity--94f3f39e-419a-51b1-8726-0d1fd5202f7f",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "CommonSpirit Health",
          "url": "https://www.commonspirit.org/news-articles/commonspirit-update",
          "external_id": "cit:fc88c747-6546-5ee4-ad1d-cb4548fa11cf",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:ed0add89fe6220e0276215d5dba5c429f02a598d528b4c29caf2af4d6d279eaa"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--317e8fba-09e8-5a22-8329-c2cc4bfc010f",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:47611a99-b835-530e-86d3-5a049620070d",
      "confidence": 90,
      "external_references": [],
      "x_ally_claim_object": {
        "kind": "iri",
        "value": "https://attack.mitre.org/techniques/T1486/"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--3369c545-b895-5d4c-89f1-f00761f1b7be",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "clm:2511dd35-1447-567d-ab8b-57da6b359807",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "CommonSpirit Health",
          "url": "https://www.commonspirit.org/news-articles/commonspirit-update",
          "external_id": "cit:d38947eb-7ae3-56c7-946c-803e08d3e96d",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:ed0add89fe6220e0276215d5dba5c429f02a598d528b4c29caf2af4d6d279eaa"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The reviewed source documents the commonspirit health security incident involving CommonSpirit Health."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--51e9b69d-94f0-5e75-8b65-d994c9177c1b",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:a1d40de4-144e-569c-9664-d9cb81a59d8f",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "CommonSpirit Health",
          "url": "https://www.commonspirit.org/news-articles/commonspirit-update",
          "external_id": "cit:5e5f1f50-fcbb-5238-96df-e74e9b51a286",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:ed0add89fe6220e0276215d5dba5c429f02a598d528b4c29caf2af4d6d279eaa"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2022-11-09"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--60d46675-5250-534c-8616-f29676af9a68",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:6a1e9ac3-8f64-5b9d-a362-7a70e1fa9ced",
      "confidence": 90,
      "external_references": [
        {
          "source_name": "CommonSpirit Health",
          "url": "https://www.commonspirit.org/news-articles/commonspirit-update",
          "external_id": "cit:f49e0856-ce9d-5863-9d39-6235b765623b",
          "description": "To further assist and support our team in the investigation and response process, we engaged leading cybersecurity specialists and notified law enforcement.",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:ed0add89fe6220e0276215d5dba5c429f02a598d528b4c29caf2af4d6d279eaa"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The retained source reports coordination with law enforcement as part of the incident response."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--895903e3-b1a1-5888-8970-507579dcbbc8",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:ae32dd13-ae90-5323-b128-92bae0746158",
      "confidence": 95,
      "external_references": [
        {
          "source_name": "CommonSpirit Health",
          "url": "https://www.commonspirit.org/news-articles/commonspirit-update",
          "external_id": "cit:19062fad-4f78-5bd7-8c01-b24d4a24ddee",
          "description": "Upon discovering the ransomware attack, the CommonSpirit organization quickly mobilized to protect our systems, contain the incident, begin an investigation, and maintain continuity of care.",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:ed0add89fe6220e0276215d5dba5c429f02a598d528b4c29caf2af4d6d279eaa"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Ransomware."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--ae3ca17d-7c8a-5ed0-8a3c-a6e8e706d051",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:74f70929-0bb1-5fb8-9123-03851d618572",
      "confidence": 90,
      "external_references": [
        {
          "source_name": "CommonSpirit Health",
          "url": "https://www.commonspirit.org/news-articles/commonspirit-update",
          "external_id": "cit:a3ae4118-c78f-5901-baf9-899997e8a088",
          "description": "To further assist and support our team in the investigation and response process, we engaged leading cybersecurity specialists and notified law enforcement.",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:ed0add89fe6220e0276215d5dba5c429f02a598d528b4c29caf2af4d6d279eaa"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The retained source describes a forensic or specialist investigation of the incident."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--ba927f14-8651-58a9-8fda-be34ba013169",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:87c5dbc0-c36b-5ede-9a38-c386a83ac3ce",
      "confidence": 83,
      "external_references": [
        {
          "source_name": "CommonSpirit Health",
          "url": "https://www.commonspirit.org/news-articles/commonspirit-update",
          "external_id": "cit:6e622266-c744-5066-a96d-e8ffb2ec2672",
          "description": "As previously shared, our teams continue to work diligently to bring systems online and restore full functionality as quickly and safely as possible, including electronic health records (EHRs).",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:ed0add89fe6220e0276215d5dba5c429f02a598d528b4c29caf2af4d6d279eaa"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "EHR outage across multiple states for weeks; delayed chemo appointments."
      }
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--d511f5e1-5852-5add-84d4-7a2fb9616298",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "evt:a0f21ab9-14ca-53e8-a752-408942e62430",
      "name": "Documented public update"
    }
  ]
}