{
  "type": "bundle",
  "id": "bundle--506b5fec-7942-5155-870f-e1451f2112b5",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--73179657-70fe-5ae6-805a-b6aad7e2e54a",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "org:cdff36f7-0896-4a7e-aa41-6972ce1b68c3",
      "name": "Covered California",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--baf11bf9-1aa0-5abe-8142-6f6313ae2cef",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "inc:00b3476a-29d8-462e-ab3c-bbd20efa1445",
      "name": "Covered California agent phishing incident"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--f5ee373f-d71b-5f12-816f-175e0893dc59",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "brh:bf6bdf41-c271-4f99-a467-c40d82b2718c",
      "name": "Covered California agent phishing incident"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--195ca068-6000-53f7-8a49-8c77a88a7289",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:3a2b957b-28c5-4ea3-a954-dadb9b2bfba3",
      "relationship_type": "resulted-in",
      "source_ref": "incident--baf11bf9-1aa0-5abe-8142-6f6313ae2cef",
      "target_ref": "x-ally-event--7d0a8f82-3d57-594c-86c6-449fe23bcd3e",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Covered California",
          "url": "https://oag.ca.gov/system/files/Agent%20Breach%20Letter%20Template_APPROVED.pdf",
          "external_id": "cit:cc4aadc7-2397-48e2-bf6f-57132d7aeb84",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5ce5fb2a1ebc44e8c87e1ad1ebdd2fdbead6a55405f754d76919470c9e5c8949"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--537dd8a2-f3cc-584c-86ea-3b4c3847c62f",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:584fe092-1081-4757-b0c9-d7f784ea7811",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--92d8edf7-ac1f-5b96-8c8c-5f4f033fd47d",
      "target_ref": "x-ally-data-category--e9bb6be1-7307-5485-8ab0-b45cd5b43c37",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Covered California",
          "url": "https://oag.ca.gov/system/files/Agent%20Breach%20Letter%20Template_APPROVED.pdf",
          "external_id": "cit:dfa5a494-4275-4431-adb8-5260edac6e10",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5ce5fb2a1ebc44e8c87e1ad1ebdd2fdbead6a55405f754d76919470c9e5c8949"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--53a30b73-c121-56af-8eb2-95dca09a1ac9",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:d5a52a10-7c7d-4139-92e5-c2b5fcda40de",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--92d8edf7-ac1f-5b96-8c8c-5f4f033fd47d",
      "target_ref": "x-ally-data-category--772969d5-39f4-5aa9-8123-4f12a64d1594",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Covered California",
          "url": "https://oag.ca.gov/system/files/Agent%20Breach%20Letter%20Template_APPROVED.pdf",
          "external_id": "cit:5079aa44-de5c-4708-928b-ae07f6b65c8d",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5ce5fb2a1ebc44e8c87e1ad1ebdd2fdbead6a55405f754d76919470c9e5c8949"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--677a7320-bee0-500c-8ddd-5e89085f8f1c",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:1c474588-7a1c-47bb-8bc2-020f1c2e6d0e",
      "relationship_type": "affected-organization",
      "source_ref": "incident--baf11bf9-1aa0-5abe-8142-6f6313ae2cef",
      "target_ref": "identity--73179657-70fe-5ae6-805a-b6aad7e2e54a",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Covered California",
          "url": "https://oag.ca.gov/system/files/Agent%20Breach%20Letter%20Template_APPROVED.pdf",
          "external_id": "cit:c94da4df-15a3-494a-8c68-b36355c6fc7c",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5ce5fb2a1ebc44e8c87e1ad1ebdd2fdbead6a55405f754d76919470c9e5c8949"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--895fc8f9-01e9-5eae-8e11-3e9cc7f41e74",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:576b6d7d-de70-4801-80d5-0f52ba9492e9",
      "relationship_type": "resulted-in",
      "source_ref": "incident--baf11bf9-1aa0-5abe-8142-6f6313ae2cef",
      "target_ref": "x-ally-data-exposure--92d8edf7-ac1f-5b96-8c8c-5f4f033fd47d",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Covered California",
          "url": "https://oag.ca.gov/system/files/Agent%20Breach%20Letter%20Template_APPROVED.pdf",
          "external_id": "cit:526dea5b-0425-4663-8643-f724ffa7af49",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5ce5fb2a1ebc44e8c87e1ad1ebdd2fdbead6a55405f754d76919470c9e5c8949"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--9f36d614-58e3-5791-852e-1606b6cb863d",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:4dfe9b93-276d-4f04-96de-b19b8bc44b6c",
      "relationship_type": "resulted-in",
      "source_ref": "incident--baf11bf9-1aa0-5abe-8142-6f6313ae2cef",
      "target_ref": "x-ally-event--cdcaecc9-0afb-5be8-8ed4-03ab29539739",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "California Department of Justice, Office of the Attorney General",
          "url": "https://oag.ca.gov/privacy/databreach/list",
          "external_id": "cit:159f04b7-6fc9-4703-8f2d-0723be78f691",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:0b0ab97c0c07b9151e40589e3361589e9a57e4c2e34ea115a4acfc3b354237ae"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--9f60cef0-ae02-56ec-842e-26734a83afba",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:65e3b9a1-b52f-42eb-8295-158ea9c6f3b4",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--92d8edf7-ac1f-5b96-8c8c-5f4f033fd47d",
      "target_ref": "x-ally-data-category--a2b7dd9d-0c02-5710-88ed-ea507d0ffa07",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Covered California",
          "url": "https://oag.ca.gov/system/files/Agent%20Breach%20Letter%20Template_APPROVED.pdf",
          "external_id": "cit:a69d3f14-b920-48f4-a286-a1144e52136b",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5ce5fb2a1ebc44e8c87e1ad1ebdd2fdbead6a55405f754d76919470c9e5c8949"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--ae61e678-ac08-5e95-8caa-605bdbda8ad4",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:ba036901-a20d-40fe-8c68-fa79c960377a",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--92d8edf7-ac1f-5b96-8c8c-5f4f033fd47d",
      "target_ref": "x-ally-data-category--ab430a0e-23bc-5177-814b-26f716196ca0",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Covered California",
          "url": "https://oag.ca.gov/system/files/Agent%20Breach%20Letter%20Template_APPROVED.pdf",
          "external_id": "cit:72724290-8a72-4fcb-955c-e5c3bfd7b9ae",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5ce5fb2a1ebc44e8c87e1ad1ebdd2fdbead6a55405f754d76919470c9e5c8949"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--1a38b2cf-9ad7-5143-8df5-bfede6a78993",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:17f026ae-b423-4e09-8238-b159d81bb40c",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Covered California",
          "url": "https://oag.ca.gov/system/files/Agent%20Breach%20Letter%20Template_APPROVED.pdf",
          "external_id": "cit:ddd12cb8-0ff4-4fa9-a8a9-04fcfb3423b9",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5ce5fb2a1ebc44e8c87e1ad1ebdd2fdbead6a55405f754d76919470c9e5c8949"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Accessed agent spreadsheets included names, agency names, license numbers, FEIN or Social Security numbers, and agency roles."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--28816e66-f0f8-5369-8509-e152a73d01e4",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:355d2dc0-50bd-48af-8536-f28b1b5b82bb",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "California Department of Justice, Office of the Attorney General",
          "url": "https://oag.ca.gov/privacy/databreach/list",
          "external_id": "cit:abf0c9dc-1a0b-4601-913c-c57e369836f8",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:0b0ab97c0c07b9151e40589e3361589e9a57e4c2e34ea115a4acfc3b354237ae"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-16"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--30e82706-77ac-5e81-8f4b-73e9ac8c95e4",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:e7b62e90-a45e-49a9-af5d-c919d4110d77",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Covered California",
          "url": "https://oag.ca.gov/system/files/Agent%20Breach%20Letter%20Template_APPROVED.pdf",
          "external_id": "cit:aa0d9d46-4c7c-4315-9bda-e97f937f0e60",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5ce5fb2a1ebc44e8c87e1ad1ebdd2fdbead6a55405f754d76919470c9e5c8949"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "An unauthorized individual used a phishing scheme to access and disclose information about Covered California agents."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--504fd42d-0494-55dd-81c2-9a9410225706",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:29a960e5-71bb-42dc-ae4b-8ff8fceb28db",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Covered California",
          "url": "https://oag.ca.gov/system/files/Agent%20Breach%20Letter%20Template_APPROVED.pdf",
          "external_id": "cit:84ddafab-39a1-4c02-8f11-ecb826f3ee60",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5ce5fb2a1ebc44e8c87e1ad1ebdd2fdbead6a55405f754d76919470c9e5c8949"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-05-13"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--5505e2b8-9fd3-56b6-8b8d-5d35c7521860",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:b2c72f5b-5284-40f7-9e75-6568c8a48877",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Covered California",
          "url": "https://oag.ca.gov/system/files/Agent%20Breach%20Letter%20Template_APPROVED.pdf",
          "external_id": "cit:4cd059ca-fbdf-4157-9e6e-d78d48f54737",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5ce5fb2a1ebc44e8c87e1ad1ebdd2fdbead6a55405f754d76919470c9e5c8949"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Covered California said it was strengthening security procedures, reviewing the incident scope and taking follow-up action."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--fc77830e-264d-5faa-86a6-87ded0e0c517",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:a319be2e-b2bc-403d-8070-9869ace37c97",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Covered California",
          "url": "https://oag.ca.gov/system/files/Agent%20Breach%20Letter%20Template_APPROVED.pdf",
          "external_id": "cit:9c1d403a-ae97-4e1b-a164-55d5ae1b8d8b",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5ce5fb2a1ebc44e8c87e1ad1ebdd2fdbead6a55405f754d76919470c9e5c8949"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-05-13"
      }
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--772969d5-39f4-5aa9-8123-4f12a64d1594",
      "created": "2026-08-09T04:16:47Z",
      "modified": "2026-08-09T04:16:47Z",
      "x_ally_original_id": "dat:68fb21c1-b8d3-41b3-acf6-93b7fd596c53",
      "name": "Employment information"
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--a2b7dd9d-0c02-5710-88ed-ea507d0ffa07",
      "created": "2026-08-08T23:12:00Z",
      "modified": "2026-08-08T23:12:00Z",
      "x_ally_original_id": "dat:559cf3f5-80c7-45ba-a930-ff0bfa8d17b0",
      "name": "Names"
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--ab430a0e-23bc-5177-814b-26f716196ca0",
      "created": "2026-08-08T23:12:00Z",
      "modified": "2026-08-08T23:12:00Z",
      "x_ally_original_id": "dat:fcd11f98-14a8-47ac-adea-68ad2985528f",
      "name": "Social Security numbers"
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--e9bb6be1-7307-5485-8ab0-b45cd5b43c37",
      "created": "2026-08-09T03:56:53Z",
      "modified": "2026-08-09T03:56:53Z",
      "x_ally_original_id": "dat:5716f70e-eee1-409c-b232-1d4948eae7f6",
      "name": "Tax identification numbers"
    },
    {
      "type": "x-ally-data-exposure",
      "spec_version": "2.1",
      "id": "x-ally-data-exposure--92d8edf7-ac1f-5b96-8c8c-5f4f033fd47d",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "exp:7ffb8ac0-ea8d-4593-b999-a181364eac0e",
      "name": "Personal information described in the notification"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--7d0a8f82-3d57-594c-86c6-449fe23bcd3e",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "evt:1a837867-b6ef-4746-9966-695d9d437845",
      "name": "Agent information exposed in phishing incident"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--cdcaecc9-0afb-5be8-8ed4-03ab29539739",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "evt:9102bdc8-f48e-4d01-b032-3bf78a5e99fc",
      "name": "California report recorded"
    }
  ]
}