{
  "type": "bundle",
  "id": "bundle--9b05c642-dc82-5124-8de0-26a5b3158a75",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--5f39b490-9214-5bc9-858e-3f61891817fd",
      "created": "2026-11-14T14:11:09.193674+00:00",
      "modified": "2026-11-14T14:11:09.193674+00:00",
      "x_ally_original_id": "org:c33ec876-fc50-4fa2-8d57-a03b9f335b6b",
      "name": "Dexcom, Inc.",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--315d3e96-7d09-5a0f-855b-9823f569bdf6",
      "created": "2026-11-14T14:11:09.193674+00:00",
      "modified": "2026-11-14T14:11:09.193674+00:00",
      "x_ally_original_id": "brh:a0e19f20-6fa1-487b-80b3-3884049850be",
      "name": "Dexcom employee-account compromise"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--64aba051-a1b1-51de-8f23-86cb57bd3a76",
      "created": "2026-11-14T14:11:09.193674+00:00",
      "modified": "2026-11-14T14:11:09.193674+00:00",
      "x_ally_original_id": "inc:624c54da-f909-4f45-8b53-102ea12c6777",
      "name": "Dexcom employee-account compromise"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--1e382e6a-7803-5a16-8f94-1ea1b62bd8d2",
      "created": "2026-11-14T14:11:09.193674+00:00",
      "modified": "2026-11-14T14:11:09.193674+00:00",
      "x_ally_original_id": "clm:9da90d0d-3b4c-4a10-b609-155ae21999af",
      "relationship_type": "resulted-in",
      "source_ref": "incident--64aba051-a1b1-51de-8f23-86cb57bd3a76",
      "target_ref": "x-ally-event--090fa441-7b63-57c2-8b8c-108dec6f226e",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Dexcom, Inc.",
          "url": "https://oag.ca.gov/system/files/ELN-28930%20Dexcom.pdf",
          "external_id": "cit:7066498b-9c36-4485-8a18-ac80ab592a49",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:ba16ae977bb31985102b69c59b74c8a64faa852b17f163036c938a35657d8eb4"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--995586ee-e646-52f6-81c5-cbb9def74368",
      "created": "2026-11-14T14:11:09.193674+00:00",
      "modified": "2026-11-14T14:11:09.193674+00:00",
      "x_ally_original_id": "clm:8c6fe08e-a162-4399-9f1c-c00f0636d306",
      "relationship_type": "affected-organization",
      "source_ref": "incident--64aba051-a1b1-51de-8f23-86cb57bd3a76",
      "target_ref": "identity--5f39b490-9214-5bc9-858e-3f61891817fd",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Dexcom, Inc.",
          "url": "https://oag.ca.gov/system/files/ELN-28930%20Dexcom.pdf",
          "external_id": "cit:2db6bcd4-d4f1-4ffe-9f01-3fd7a186e227",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:ba16ae977bb31985102b69c59b74c8a64faa852b17f163036c938a35657d8eb4"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--6a5b321d-2b5b-5a7a-8525-23d9964c9a59",
      "created": "2026-11-14T14:11:09.193674+00:00",
      "modified": "2026-11-14T14:11:09.193674+00:00",
      "x_ally_original_id": "clm:6429cf79-b528-435d-8b4a-af37e2af4520",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Dexcom, Inc.",
          "url": "https://oag.ca.gov/system/files/ELN-28930%20Dexcom.pdf",
          "external_id": "cit:6a55af8f-846a-42c8-8a12-e813e46ed22a",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:ba16ae977bb31985102b69c59b74c8a64faa852b17f163036c938a35657d8eb4"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Dexcom revoked access to compromised accounts, engaged external investigators and reinforced security-awareness training. It reported no ongoing unauthorized activity or indication of misuse."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--aafffcf5-5405-5f0e-8993-1a825c112a80",
      "created": "2026-11-14T14:11:09.193674+00:00",
      "modified": "2026-11-14T14:11:09.193674+00:00",
      "x_ally_original_id": "clm:8f34641b-b588-41f5-85aa-c4dccf60cc26",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Dexcom, Inc.",
          "url": "https://oag.ca.gov/system/files/ELN-28926%20Dexcom.pdf",
          "external_id": "cit:231f4da1-2801-4fea-9350-8592dc5617df",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:4572e97cc0e17c08564eac1ba6e3a9031e9302d42cdcab4c1ec7a68a901e8c82"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "A separate notice for another recipient group lists names, Social Security numbers, birth dates and government identification information, and offers two years of identity monitoring."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--b57d105b-04a2-5ed5-8316-be62dade9327",
      "created": "2026-11-14T14:11:09.193674+00:00",
      "modified": "2026-11-14T14:11:09.193674+00:00",
      "x_ally_original_id": "clm:2a2a75dc-ed65-419d-af4b-584ae2b973d7",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Dexcom, Inc.",
          "url": "https://oag.ca.gov/system/files/ELN-28930%20Dexcom.pdf",
          "external_id": "cit:f9e7be8c-58b6-49d2-9eff-db2dc969a7a8",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:ba16ae977bb31985102b69c59b74c8a64faa852b17f163036c938a35657d8eb4"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "One recipient notice identifies names, addresses and limited health information, such as pharmacy, provider, birth date, prescription number, diagnoses or Dexcom-user status. For that recipient group, Social Security numbers and financial information were excluded."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--bf4f8844-e877-5726-8273-95b1a60767d5",
      "created": "2026-11-14T14:11:09.193674+00:00",
      "modified": "2026-11-14T14:11:09.193674+00:00",
      "x_ally_original_id": "clm:1be61fe7-5d71-4cfd-a233-7cd9fb5cebda",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Dexcom, Inc.",
          "url": "https://oag.ca.gov/system/files/ELN-28930%20Dexcom.pdf",
          "external_id": "cit:48d812aa-04d2-43b0-9dc0-299369d8ab3d",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:ba16ae977bb31985102b69c59b74c8a64faa852b17f163036c938a35657d8eb4"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-11-02"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--e87cad2b-fca3-534e-8da9-c9b7efa89b66",
      "created": "2026-11-14T14:11:09.193674+00:00",
      "modified": "2026-11-14T14:11:09.193674+00:00",
      "x_ally_original_id": "clm:9021da1d-e859-44c9-8408-a4f656d40636",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Dexcom, Inc.",
          "url": "https://oag.ca.gov/system/files/ELN-28930%20Dexcom.pdf",
          "external_id": "cit:cdfc0319-f859-43f1-ad24-0ad32e8e4285",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:ba16ae977bb31985102b69c59b74c8a64faa852b17f163036c938a35657d8eb4"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Dexcom determined on November 2, 2026 that personal information may have been involved after social engineering gave a third party access to employee accounts and enabled file downloads. The notice does not date the initial intrusion."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--f52dccd3-0e9b-52e7-8942-4a9efacd7e7c",
      "created": "2026-11-14T14:11:09.193674+00:00",
      "modified": "2026-11-14T14:11:09.193674+00:00",
      "x_ally_original_id": "clm:1c6fa12e-0368-48e7-a26e-e34dacc0d726",
      "confidence": 100,
      "external_references": [],
      "x_ally_claim_object": {
        "kind": "iri",
        "value": "https://attack.mitre.org/techniques/T1078/"
      }
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--090fa441-7b63-57c2-8b8c-108dec6f226e",
      "created": "2026-11-14T14:11:09.193674+00:00",
      "modified": "2026-11-14T14:11:09.193674+00:00",
      "x_ally_original_id": "evt:3e85fd7e-7596-4dd0-9fbc-c345d8be21d5",
      "name": "Possible personal-information impact determined"
    }
  ]
}