{
  "type": "bundle",
  "id": "bundle--bf978cf3-1a49-5278-8581-34fa54e0aa3c",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--720eacd9-0f72-5756-8a68-9d0b90878d25",
      "created": "2026-10-27T14:17:41.239837+00:00",
      "modified": "2026-10-27T14:17:41.239837+00:00",
      "x_ally_original_id": "org:c67ed5dd-55c1-4aa6-b611-81b53f38f4fa",
      "name": "Denver Health Medical Plan",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--6b067501-0fc1-5ff1-845c-d3fd65b2b169",
      "created": "2026-10-27T14:17:41.239837+00:00",
      "modified": "2026-10-27T14:17:41.239837+00:00",
      "x_ally_original_id": "inc:f3a076c5-7689-48ac-8d4a-ea786a12bdda",
      "name": "Denver Health Medical Plan SquareML access-key exposure"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--c338ba33-4c40-5696-837f-5bc03286e06d",
      "created": "2026-10-27T14:17:41.239837+00:00",
      "modified": "2026-10-27T14:17:41.239837+00:00",
      "x_ally_original_id": "brh:1cd59852-8753-4bd5-a059-37e40c0503c5",
      "name": "Denver Health Medical Plan SquareML access-key exposure"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--33a511b7-0dd6-5d3c-8e72-847788bc5065",
      "created": "2026-10-27T14:17:41.239837+00:00",
      "modified": "2026-10-27T14:17:41.239837+00:00",
      "x_ally_original_id": "clm:c011c739-17ce-429e-ab16-0f9a58c1284e",
      "relationship_type": "affected-organization",
      "source_ref": "incident--6b067501-0fc1-5ff1-845c-d3fd65b2b169",
      "target_ref": "identity--720eacd9-0f72-5756-8a68-9d0b90878d25",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Denver Health Medical Plan",
          "url": "https://www.denverhealthmedicalplan.org/sites/default/files/resources/document/Denver%20Health_News%20Release_DHMP%20SquareML%20Security%20Incident_FINAL%2010.2.26.pdf",
          "external_id": "cit:a2fcd381-0519-4273-a877-04d9232b595c",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:88c2cfa3d7e1646afdfac292ff37b561c0c09ca655a26c5c6c8d97880ca62503"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--425d1978-7a07-5c29-8a4a-8d72d95785b8",
      "created": "2026-10-27T14:17:41.239837+00:00",
      "modified": "2026-10-27T14:17:41.239837+00:00",
      "x_ally_original_id": "clm:03d618ed-7385-4ecb-ab27-fe2eb17012c3",
      "relationship_type": "resulted-in",
      "source_ref": "incident--6b067501-0fc1-5ff1-845c-d3fd65b2b169",
      "target_ref": "x-ally-event--127931be-6252-5274-8de4-441a43ae425d",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Denver Health Medical Plan",
          "url": "https://www.denverhealthmedicalplan.org/sites/default/files/resources/document/Denver%20Health_News%20Release_DHMP%20SquareML%20Security%20Incident_FINAL%2010.2.26.pdf",
          "external_id": "cit:699af2eb-5d2a-4ff6-b987-b3533a64da1e",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:88c2cfa3d7e1646afdfac292ff37b561c0c09ca655a26c5c6c8d97880ca62503"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--5d96c308-aaba-5199-8ecc-5f08cd2da741",
      "created": "2026-10-27T14:17:41.239837+00:00",
      "modified": "2026-10-27T14:17:41.239837+00:00",
      "x_ally_original_id": "clm:bd768873-2280-42da-a238-858ebaf584e3",
      "relationship_type": "resulted-in",
      "source_ref": "incident--6b067501-0fc1-5ff1-845c-d3fd65b2b169",
      "target_ref": "x-ally-data-exposure--08107cc5-a328-5abb-8da7-34eeb9c04ce9",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Denver Health Medical Plan",
          "url": "https://www.denverhealthmedicalplan.org/sites/default/files/resources/document/Denver%20Health_News%20Release_DHMP%20SquareML%20Security%20Incident_FINAL%2010.2.26.pdf",
          "external_id": "cit:e5080346-4829-4495-bd9c-c62c03b9fc48",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:88c2cfa3d7e1646afdfac292ff37b561c0c09ca655a26c5c6c8d97880ca62503"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--6b76e97e-abde-53d0-8c92-3ddec45162a3",
      "created": "2026-10-27T14:17:41.239837+00:00",
      "modified": "2026-10-27T14:17:41.239837+00:00",
      "x_ally_original_id": "clm:6264a1ee-94c9-4b94-a42b-b8dbba5de37e",
      "relationship_type": "resulted-in",
      "source_ref": "incident--6b067501-0fc1-5ff1-845c-d3fd65b2b169",
      "target_ref": "x-ally-event--fe7ba37b-9394-56fd-84e9-ff817085706f",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Denver Health Medical Plan",
          "url": "https://www.denverhealthmedicalplan.org/sites/default/files/resources/document/Denver%20Health_News%20Release_DHMP%20SquareML%20Security%20Incident_FINAL%2010.2.26.pdf",
          "external_id": "cit:072b1b9a-de1f-4e8e-9903-62ed6c6f3f19",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:88c2cfa3d7e1646afdfac292ff37b561c0c09ca655a26c5c6c8d97880ca62503"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--7d9fc659-23d6-5ce8-8a72-e6df36ab56be",
      "created": "2026-10-27T14:17:41.239837+00:00",
      "modified": "2026-10-27T14:17:41.239837+00:00",
      "x_ally_original_id": "clm:6e4e6bb8-4d54-4f36-8eaf-47e29a92a6d8",
      "relationship_type": "resulted-in",
      "source_ref": "incident--6b067501-0fc1-5ff1-845c-d3fd65b2b169",
      "target_ref": "x-ally-event--4b30d8a6-23b6-57a3-8d45-d627ff16148c",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Denver Health Medical Plan",
          "url": "https://www.denverhealthmedicalplan.org/sites/default/files/resources/document/Denver%20Health_News%20Release_DHMP%20SquareML%20Security%20Incident_FINAL%2010.2.26.pdf",
          "external_id": "cit:351d600e-4ebb-449a-88b9-e81b97467a5a",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:88c2cfa3d7e1646afdfac292ff37b561c0c09ca655a26c5c6c8d97880ca62503"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--d6935dee-967f-55c0-8613-46e3cc24387e",
      "created": "2026-10-27T14:17:41.239837+00:00",
      "modified": "2026-10-27T14:17:41.239837+00:00",
      "x_ally_original_id": "clm:ad5d920c-d2fe-409b-b587-2b1ed639444e",
      "relationship_type": "resulted-in",
      "source_ref": "incident--6b067501-0fc1-5ff1-845c-d3fd65b2b169",
      "target_ref": "x-ally-event--c454915a-d919-5c5a-821c-eca2648315ad",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Denver Health Medical Plan",
          "url": "https://www.denverhealthmedicalplan.org/sites/default/files/resources/document/Denver%20Health_News%20Release_DHMP%20SquareML%20Security%20Incident_FINAL%2010.2.26.pdf",
          "external_id": "cit:31e6ccd7-7265-4165-8291-a90eff05fe60",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:88c2cfa3d7e1646afdfac292ff37b561c0c09ca655a26c5c6c8d97880ca62503"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--2eea7b79-2273-5449-8759-3742e46af8b5",
      "created": "2026-10-27T14:17:41.239837+00:00",
      "modified": "2026-10-27T14:17:41.239837+00:00",
      "x_ally_original_id": "clm:e242c801-4f36-4cb2-aeaf-e7f6314c7c63",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Denver Health Medical Plan",
          "url": "https://www.denverhealthmedicalplan.org/sites/default/files/resources/document/Denver%20Health_News%20Release_DHMP%20SquareML%20Security%20Incident_FINAL%2010.2.26.pdf",
          "external_id": "cit:105962a8-61cc-4b10-a850-33bb711be6fa",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:88c2cfa3d7e1646afdfac292ff37b561c0c09ca655a26c5c6c8d97880ca62503"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-08-18"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--3b2435e1-524f-56f2-889e-4f4c46b0c92c",
      "created": "2026-10-27T14:17:41.239837+00:00",
      "modified": "2026-10-27T14:17:41.239837+00:00",
      "x_ally_original_id": "clm:f3d1f5f7-be05-457a-a75e-c110bf0fc224",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Denver Health Medical Plan",
          "url": "https://www.denverhealthmedicalplan.org/sites/default/files/resources/document/Denver%20Health_News%20Release_DHMP%20SquareML%20Security%20Incident_FINAL%2010.2.26.pdf",
          "external_id": "cit:e4f9b1f7-d960-4505-bdd4-bb54818f42f1",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:88c2cfa3d7e1646afdfac292ff37b561c0c09ca655a26c5c6c8d97880ca62503"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-01"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--4307abf4-b8d6-507e-89c3-90c629e28647",
      "created": "2026-10-27T14:17:41.239837+00:00",
      "modified": "2026-10-27T14:17:41.239837+00:00",
      "x_ally_original_id": "clm:3784cc13-1996-4102-a0ff-cfc5ecb0a3e4",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Denver Health Medical Plan",
          "url": "https://www.denverhealthmedicalplan.org/sites/default/files/resources/document/Denver%20Health_News%20Release_DHMP%20SquareML%20Security%20Incident_FINAL%2010.2.26.pdf",
          "external_id": "cit:cafdae0d-c544-4a56-b17a-076f98f30be5",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:88c2cfa3d7e1646afdfac292ff37b561c0c09ca655a26c5c6c8d97880ca62503"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-01"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--44c61f0b-312e-59d6-8531-1e385061b228",
      "created": "2026-10-27T14:17:41.239837+00:00",
      "modified": "2026-10-27T14:17:41.239837+00:00",
      "x_ally_original_id": "clm:7cef64ad-23be-4a7a-9de8-a78cadeb2e71",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Denver Health Medical Plan",
          "url": "https://www.denverhealthmedicalplan.org/sites/default/files/resources/document/Denver%20Health_News%20Release_DHMP%20SquareML%20Security%20Incident_FINAL%2010.2.26.pdf",
          "external_id": "cit:2c7419c9-ddb5-452f-a2d4-5889240c0872",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:88c2cfa3d7e1646afdfac292ff37b561c0c09ca655a26c5c6c8d97880ca62503"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "DHMP learned on August 14, 2026 that an active SquareML access key had been posted on a public website. It found the key was inadvertently published on June 27, 2025 and deactivated it on August 18, 2026."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--7152dfb9-be4c-5280-8c1f-46c2b2af74d2",
      "created": "2026-10-27T14:17:41.239837+00:00",
      "modified": "2026-10-27T14:17:41.239837+00:00",
      "x_ally_original_id": "clm:c68f5613-9152-498c-9f9b-62e5aebe4297",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Denver Health Medical Plan",
          "url": "https://www.denverhealthmedicalplan.org/sites/default/files/resources/document/Denver%20Health_News%20Release_DHMP%20SquareML%20Security%20Incident_FINAL%2010.2.26.pdf",
          "external_id": "cit:255db2e7-94e2-4b16-b206-4a61e6313a0d",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:88c2cfa3d7e1646afdfac292ff37b561c0c09ca655a26c5c6c8d97880ca62503"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "DHMP deactivated the key, reset account passwords, investigated and reviewed vendor safeguards. It described HIPAA reporting and mailing notification letters to potentially affected members."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--7f1f05b1-0ca6-5ea2-8e48-69bba199bd32",
      "created": "2026-10-27T14:17:41.239837+00:00",
      "modified": "2026-10-27T14:17:41.239837+00:00",
      "x_ally_original_id": "clm:c462af8b-d645-42fb-a750-9696cc446f88",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Denver Health Medical Plan",
          "url": "https://www.denverhealthmedicalplan.org/sites/default/files/resources/document/Denver%20Health_News%20Release_DHMP%20SquareML%20Security%20Incident_FINAL%2010.2.26.pdf",
          "external_id": "cit:2240b81b-8dba-4e7d-a479-69add025a8f5",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:88c2cfa3d7e1646afdfac292ff37b561c0c09ca655a26c5c6c8d97880ca62503"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-08-14"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--9dbf0ea3-4bfe-524c-8539-781ae4e4c1c4",
      "created": "2026-10-27T14:17:41.239837+00:00",
      "modified": "2026-10-27T14:17:41.239837+00:00",
      "x_ally_original_id": "clm:f8fefda3-f38c-4718-9a92-1a03087bbe24",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Denver Health Medical Plan",
          "url": "https://www.denverhealthmedicalplan.org/sites/default/files/resources/document/Denver%20Health_News%20Release_DHMP%20SquareML%20Security%20Incident_FINAL%2010.2.26.pdf",
          "external_id": "cit:6243445f-52c5-4b19-86a1-31df87d751bf",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:88c2cfa3d7e1646afdfac292ff37b561c0c09ca655a26c5c6c8d97880ca62503"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "integer",
        "value": 238083
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--a66c9467-c54b-5658-8e91-536289f72881",
      "created": "2026-10-27T14:17:41.239837+00:00",
      "modified": "2026-10-27T14:17:41.239837+00:00",
      "x_ally_original_id": "clm:b7e110c5-90da-4082-a2a7-0c00be8d62bf",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Denver Health Medical Plan",
          "url": "https://www.denverhealthmedicalplan.org/sites/default/files/resources/document/Denver%20Health_News%20Release_DHMP%20SquareML%20Security%20Incident_FINAL%2010.2.26.pdf",
          "external_id": "cit:2bbbf34f-69ab-4529-b10c-f1f2fdb9d18b",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:88c2cfa3d7e1646afdfac292ff37b561c0c09ca655a26c5c6c8d97880ca62503"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Potential information included names, birth dates, city/state/ZIP, demographic information, health metrics, plan eligibility, provider information and admission, discharge or transfer details. The database did not contain Social Security numbers or financial data."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--aff70372-2541-5a8c-8a6e-4c7acc46879a",
      "created": "2026-10-27T14:17:41.239837+00:00",
      "modified": "2026-10-27T14:17:41.239837+00:00",
      "x_ally_original_id": "clm:e0f0fd0f-8fef-457d-8d5d-7e2c544841eb",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Denver Health Medical Plan",
          "url": "https://www.denverhealthmedicalplan.org/sites/default/files/resources/document/Denver%20Health_News%20Release_DHMP%20SquareML%20Security%20Incident_FINAL%2010.2.26.pdf",
          "external_id": "cit:22fbec1f-bce3-49dc-a627-0ee2cf9c0822",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:88c2cfa3d7e1646afdfac292ff37b561c0c09ca655a26c5c6c8d97880ca62503"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The key could have allowed access to a database containing information about 238,083 members. DHMP reported no evidence that the information had been viewed or misused."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--bf0d2cc7-6b0d-5ae6-85c3-967d569e19e0",
      "created": "2026-10-27T14:17:41.239837+00:00",
      "modified": "2026-10-27T14:17:41.239837+00:00",
      "x_ally_original_id": "clm:b1193670-a9ac-4c7e-a06d-ff4320bd3d2e",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Denver Health Medical Plan",
          "url": "https://www.denverhealthmedicalplan.org/sites/default/files/resources/document/Denver%20Health_News%20Release_DHMP%20SquareML%20Security%20Incident_FINAL%2010.2.26.pdf",
          "external_id": "cit:ac19941b-2f33-4059-8d9f-0762f7d2fa08",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:88c2cfa3d7e1646afdfac292ff37b561c0c09ca655a26c5c6c8d97880ca62503"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-08-14"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--d4187d7b-dcf6-5a6b-842a-0cc026e6eab2",
      "created": "2026-10-27T14:17:41.239837+00:00",
      "modified": "2026-10-27T14:17:41.239837+00:00",
      "x_ally_original_id": "clm:4d7bd47e-7c53-461d-a10b-23b33f786a53",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Denver Health Medical Plan",
          "url": "https://www.denverhealthmedicalplan.org/sites/default/files/resources/document/Denver%20Health_News%20Release_DHMP%20SquareML%20Security%20Incident_FINAL%2010.2.26.pdf",
          "external_id": "cit:47252743-f33f-4229-85aa-75ce6e66a99a",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:88c2cfa3d7e1646afdfac292ff37b561c0c09ca655a26c5c6c8d97880ca62503"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2025-06-27"
      }
    },
    {
      "type": "x-ally-data-exposure",
      "spec_version": "2.1",
      "id": "x-ally-data-exposure--08107cc5-a328-5abb-8da7-34eeb9c04ce9",
      "created": "2026-10-27T14:17:41.239837+00:00",
      "modified": "2026-10-27T14:17:41.239837+00:00",
      "x_ally_original_id": "exp:bf723097-5904-4d66-b919-d88aaf0759a5",
      "name": "Potential access to member database through publicly posted SquareML key"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--127931be-6252-5274-8de4-441a43ae425d",
      "created": "2026-10-27T14:17:41.239837+00:00",
      "modified": "2026-10-27T14:17:41.239837+00:00",
      "x_ally_original_id": "evt:2077fe2c-8e84-4ff7-a4bf-1dab3e3bf95b",
      "name": "Health plan issues privacy statement"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--4b30d8a6-23b6-57a3-8d45-d627ff16148c",
      "created": "2026-10-27T14:17:41.239837+00:00",
      "modified": "2026-10-27T14:17:41.239837+00:00",
      "x_ally_original_id": "evt:2ac7889b-553a-4948-9fda-e26babc90258",
      "name": "Health plan informed of exposed key"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--c454915a-d919-5c5a-821c-eca2648315ad",
      "created": "2026-10-27T14:17:41.239837+00:00",
      "modified": "2026-10-27T14:17:41.239837+00:00",
      "x_ally_original_id": "evt:8964b708-6c7a-4b69-91cf-10a35ce02524",
      "name": "Exposed key deactivated"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--fe7ba37b-9394-56fd-84e9-ff817085706f",
      "created": "2026-10-27T14:17:41.239837+00:00",
      "modified": "2026-10-27T14:17:41.239837+00:00",
      "x_ally_original_id": "evt:812a51ef-86e9-4820-b96a-68b8d30d899e",
      "name": "Access key inadvertently made public"
    }
  ]
}