{
  "type": "bundle",
  "id": "bundle--150f4c1a-7dff-5d7f-8dcf-7c7f72a78e8b",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--be541818-0b40-5727-8dc3-e34d7e22b3ab",
      "created": "2026-10-30T14:22:20.444045+00:00",
      "modified": "2026-10-30T14:22:20.444045+00:00",
      "x_ally_original_id": "org:84a0d419-9f76-4b5b-b7da-2ae2e4421844",
      "name": "Directed Trust Company",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--6e95db76-a835-5bf5-8a07-53c40cad4931",
      "created": "2026-10-30T14:22:20.444045+00:00",
      "modified": "2026-10-30T14:22:20.444045+00:00",
      "x_ally_original_id": "brh:6ba0749e-1961-4f28-a7c0-41dfaf2e6ac4",
      "name": "Directed Trust Dropbox Sign document incident"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--e2c0d987-4845-531e-8b04-5539e08eb514",
      "created": "2026-10-30T14:22:20.444045+00:00",
      "modified": "2026-10-30T14:22:20.444045+00:00",
      "x_ally_original_id": "inc:904aa7b4-04e6-4a60-aec0-1340f64746b8",
      "name": "Directed Trust Dropbox Sign document incident"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--3b30e18f-3e4b-56ad-80fe-ef94c9c4d30d",
      "created": "2026-10-30T14:22:20.444045+00:00",
      "modified": "2026-10-30T14:22:20.444045+00:00",
      "x_ally_original_id": "clm:a92eec96-50a0-414d-801a-f29e362071c0",
      "relationship_type": "resulted-in",
      "source_ref": "incident--e2c0d987-4845-531e-8b04-5539e08eb514",
      "target_ref": "x-ally-event--8f635928-4c3e-5fb3-8f59-ca0047e562ab",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Directed Trust Company",
          "url": "https://oag.ca.gov/system/files/Directed%20Trust%20Company%20-%20Notice%20of%20Data%20Event%20-%20CA_0.pdf",
          "external_id": "cit:fe6dadb9-98c9-46de-ab46-4f432ab082d4",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:9b6a3587ed93cfe2b33259c75b68c4bdc1bf6fa9857a5ebc23fedf9171cde56f"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--7ecf5a1c-8ae8-5b55-8253-b7bd82f854c5",
      "created": "2026-10-30T14:22:20.444045+00:00",
      "modified": "2026-10-30T14:22:20.444045+00:00",
      "x_ally_original_id": "clm:5ed37ef0-e85a-4e2a-b49c-4c43c0dce152",
      "relationship_type": "resulted-in",
      "source_ref": "incident--e2c0d987-4845-531e-8b04-5539e08eb514",
      "target_ref": "x-ally-event--c7f7aac7-20e3-525f-8e32-f9cd62645840",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Directed Trust Company",
          "url": "https://oag.ca.gov/system/files/Directed%20Trust%20Company%20-%20Notice%20of%20Data%20Event%20-%20CA_0.pdf",
          "external_id": "cit:531f8ccb-1ead-4dba-959f-48923320e27a",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:9b6a3587ed93cfe2b33259c75b68c4bdc1bf6fa9857a5ebc23fedf9171cde56f"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--98d8cc15-4fb9-5f3c-8aff-5dc40f33249f",
      "created": "2026-10-30T14:22:20.444045+00:00",
      "modified": "2026-10-30T14:22:20.444045+00:00",
      "x_ally_original_id": "clm:1f86c952-e7b0-490b-890f-2a580a41a2c8",
      "relationship_type": "affected-organization",
      "source_ref": "incident--e2c0d987-4845-531e-8b04-5539e08eb514",
      "target_ref": "identity--be541818-0b40-5727-8dc3-e34d7e22b3ab",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Directed Trust Company",
          "url": "https://oag.ca.gov/system/files/Directed%20Trust%20Company%20-%20Notice%20of%20Data%20Event%20-%20CA_0.pdf",
          "external_id": "cit:ae814d75-2bd8-4035-876b-74d480692424",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:9b6a3587ed93cfe2b33259c75b68c4bdc1bf6fa9857a5ebc23fedf9171cde56f"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--c317c9b9-296a-5909-8d0c-930e188143e5",
      "created": "2026-10-30T14:22:20.444045+00:00",
      "modified": "2026-10-30T14:22:20.444045+00:00",
      "x_ally_original_id": "clm:1b844a8b-12e1-4d06-ac8d-85b7843db075",
      "relationship_type": "resulted-in",
      "source_ref": "incident--e2c0d987-4845-531e-8b04-5539e08eb514",
      "target_ref": "x-ally-event--fe2994d2-16c1-5643-829d-334c5fbcca75",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Directed Trust Company",
          "url": "https://oag.ca.gov/system/files/Directed%20Trust%20Company%20-%20Notice%20of%20Data%20Event%20-%20CA_0.pdf",
          "external_id": "cit:199211e4-1438-476f-9fd5-2e7d0de10a9e",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:9b6a3587ed93cfe2b33259c75b68c4bdc1bf6fa9857a5ebc23fedf9171cde56f"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--25c191e4-58c3-5a56-8724-d193e84a6abf",
      "created": "2026-10-30T14:22:20.444045+00:00",
      "modified": "2026-10-30T14:22:20.444045+00:00",
      "x_ally_original_id": "clm:8ed36fbb-09e9-4d23-be39-55f366362757",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Directed Trust Company",
          "url": "https://oag.ca.gov/system/files/Directed%20Trust%20Company%20-%20Notice%20of%20Data%20Event%20-%20CA_0.pdf",
          "external_id": "cit:d8a6461c-ed5b-4b35-a0ea-4552c93b3e5c",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:9b6a3587ed93cfe2b33259c75b68c4bdc1bf6fa9857a5ebc23fedf9171cde56f"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Directed Trust secured access, reviewed affected documents and completed that review on October 12. Its October 27 letter reported no evidence of fraudulent use and offered monitoring; the sample does not specify the service duration."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--3099f569-5d0a-56bf-888b-45e13fa10248",
      "created": "2026-10-30T14:22:20.444045+00:00",
      "modified": "2026-10-30T14:22:20.444045+00:00",
      "x_ally_original_id": "clm:334daee9-6254-4199-9218-92e1ec52969b",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Directed Trust Company",
          "url": "https://oag.ca.gov/system/files/Directed%20Trust%20Company%20-%20Notice%20of%20Data%20Event%20-%20CA_0.pdf",
          "external_id": "cit:4b3fe852-9456-43c7-acb1-2471ce725fb7",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:9b6a3587ed93cfe2b33259c75b68c4bdc1bf6fa9857a5ebc23fedf9171cde56f"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Directed Trust limited the incident to documents submitted through that account. It said its client portal, other systems and customer account logins were unaffected. The public sample leaves the specific personal-information categories blank and supplies no population total."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--5ad5b9f9-66ce-5b4c-8e33-6f4c1963bee4",
      "created": "2026-10-30T14:22:20.444045+00:00",
      "modified": "2026-10-30T14:22:20.444045+00:00",
      "x_ally_original_id": "clm:f7d93dd0-e385-4e30-abf0-f24e284f34ae",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Directed Trust Company",
          "url": "https://oag.ca.gov/system/files/Directed%20Trust%20Company%20-%20Notice%20of%20Data%20Event%20-%20CA_0.pdf",
          "external_id": "cit:e5191dd4-22b6-4593-b7c5-ae066ca4494a",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:9b6a3587ed93cfe2b33259c75b68c4bdc1bf6fa9857a5ebc23fedf9171cde56f"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The account-level access mechanism is not disclosed. This notice does not establish a compromise of Dropbox’s wider service."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--5edc6108-4fc3-535e-80d7-f780eeb8091e",
      "created": "2026-10-30T14:22:20.444045+00:00",
      "modified": "2026-10-30T14:22:20.444045+00:00",
      "x_ally_original_id": "clm:5a17eaf3-ca00-411a-89a6-f24e70faab61",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Directed Trust Company",
          "url": "https://oag.ca.gov/system/files/Directed%20Trust%20Company%20-%20Notice%20of%20Data%20Event%20-%20CA_0.pdf",
          "external_id": "cit:015377dc-e3b3-41f9-9777-a2b503c7bb8f",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:9b6a3587ed93cfe2b33259c75b68c4bdc1bf6fa9857a5ebc23fedf9171cde56f"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-12"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--a4541c76-e722-5f01-832b-1b358ca28c2e",
      "created": "2026-10-30T14:22:20.444045+00:00",
      "modified": "2026-10-30T14:22:20.444045+00:00",
      "x_ally_original_id": "clm:c4767162-d526-41c2-9065-4cac6c1be83d",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Directed Trust Company",
          "url": "https://oag.ca.gov/system/files/Directed%20Trust%20Company%20-%20Notice%20of%20Data%20Event%20-%20CA_0.pdf",
          "external_id": "cit:51f7aa2b-1bda-47a9-bbec-0b09ec86dd2e",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:9b6a3587ed93cfe2b33259c75b68c4bdc1bf6fa9857a5ebc23fedf9171cde56f"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-07-07"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--b589c61a-70ba-530a-8464-0048f51163bf",
      "created": "2026-10-30T14:22:20.444045+00:00",
      "modified": "2026-10-30T14:22:20.444045+00:00",
      "x_ally_original_id": "clm:344bfa03-fd91-4298-a668-eeda41a637fa",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Directed Trust Company",
          "url": "https://oag.ca.gov/system/files/Directed%20Trust%20Company%20-%20Notice%20of%20Data%20Event%20-%20CA_0.pdf",
          "external_id": "cit:b208df6d-e036-4f9b-bf41-fff26b26c06d",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:9b6a3587ed93cfe2b33259c75b68c4bdc1bf6fa9857a5ebc23fedf9171cde56f"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Directed Trust discovered suspicious activity around July 7, 2026 involving its Dropbox Sign electronic-signature account. Investigators determined that an unauthorized actor accessed files containing personal information."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--cf714638-b20d-5d6f-893f-9a400afeb00e",
      "created": "2026-10-30T14:22:20.444045+00:00",
      "modified": "2026-10-30T14:22:20.444045+00:00",
      "x_ally_original_id": "clm:9fb659b4-e907-45be-a9d2-3de57d8fa579",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Directed Trust Company",
          "url": "https://oag.ca.gov/system/files/Directed%20Trust%20Company%20-%20Notice%20of%20Data%20Event%20-%20CA_0.pdf",
          "external_id": "cit:2b8a68be-d737-48b5-9427-8b771c4dc39c",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:9b6a3587ed93cfe2b33259c75b68c4bdc1bf6fa9857a5ebc23fedf9171cde56f"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-27"
      }
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--8f635928-4c3e-5fb3-8f59-ca0047e562ab",
      "created": "2026-10-30T14:22:20.444045+00:00",
      "modified": "2026-10-30T14:22:20.444045+00:00",
      "x_ally_original_id": "evt:f2e4c380-0ec8-4bb4-ae13-8f3bdbeb94ee",
      "name": "Notification sample dated"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--c7f7aac7-20e3-525f-8e32-f9cd62645840",
      "created": "2026-10-30T14:22:20.444045+00:00",
      "modified": "2026-10-30T14:22:20.444045+00:00",
      "x_ally_original_id": "evt:24947620-0820-4cf8-b634-60d0be6bceca",
      "name": "Suspicious activity identified around this date"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--fe2994d2-16c1-5643-829d-334c5fbcca75",
      "created": "2026-10-30T14:22:20.444045+00:00",
      "modified": "2026-10-30T14:22:20.444045+00:00",
      "x_ally_original_id": "evt:0c8e6cbc-b1eb-4212-a588-0f24b9c754c0",
      "name": "Document review completed"
    }
  ]
}