{
  "type": "bundle",
  "id": "bundle--5b767c90-3e0a-519d-85ee-4b2d1059e88a",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--5906a107-90c4-5f37-82ab-159be0447232",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "org:573fabc5-42f6-4caa-bcf0-7c4fd095510a",
      "name": "El Camino Health",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--0a3c921a-e1f7-5f34-8706-29124704f8f2",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "brh:1696237f-d29f-428a-bb82-398cf082bb01",
      "name": "El Camino Health Microsoft 365 incident"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--603f6d5c-2ef8-5b7b-85c0-c6537fcf5104",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "inc:5751145c-d861-42c3-8cdb-43b6b130620f",
      "name": "El Camino Health Microsoft 365 incident"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--04452fce-1580-5f46-8d44-ce6f3698b25c",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:14243c46-6d15-41ed-9664-52bf2c471f95",
      "relationship_type": "resulted-in",
      "source_ref": "incident--603f6d5c-2ef8-5b7b-85c0-c6537fcf5104",
      "target_ref": "x-ally-event--9760445d-4f37-5b9a-830b-90f9fdf6b671",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "El Camino Health",
          "url": "https://oag.ca.gov/system/files/El%20Camino%20-%20California%20Notification.pdf",
          "external_id": "cit:ebad0706-c29c-4ba0-8b0d-6948f80e7565",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:124cfcacca9e0564a8567800fa1b176148fe6eaa037a4c22d79a0d1bb28cd853"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--c28e4e4c-310a-594f-833f-4a0ef27ba087",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:3846ea5f-9d5e-4359-b231-1bca70375c54",
      "relationship_type": "resulted-in",
      "source_ref": "incident--603f6d5c-2ef8-5b7b-85c0-c6537fcf5104",
      "target_ref": "x-ally-event--57c45af8-6e14-5c6a-8fd9-84117d334509",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "El Camino Health",
          "url": "https://oag.ca.gov/system/files/El%20Camino%20-%20California%20Notification.pdf",
          "external_id": "cit:696f80d1-1526-48ce-b88b-7917b290124d",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:124cfcacca9e0564a8567800fa1b176148fe6eaa037a4c22d79a0d1bb28cd853"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--cd63f026-6d1d-51d8-80df-e776254441b8",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:9d8ef8a9-9933-487e-81a3-25e670144d61",
      "relationship_type": "affected-organization",
      "source_ref": "incident--603f6d5c-2ef8-5b7b-85c0-c6537fcf5104",
      "target_ref": "identity--5906a107-90c4-5f37-82ab-159be0447232",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "El Camino Health",
          "url": "https://oag.ca.gov/system/files/El%20Camino%20-%20California%20Notification.pdf",
          "external_id": "cit:5aa9bfab-b030-4f3e-8303-716bc0138425",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:124cfcacca9e0564a8567800fa1b176148fe6eaa037a4c22d79a0d1bb28cd853"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--d2c68279-6834-5016-8b3e-e18c28ca738d",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:8152e1a5-4003-4f43-a694-f6d98d9af9da",
      "relationship_type": "resulted-in",
      "source_ref": "incident--603f6d5c-2ef8-5b7b-85c0-c6537fcf5104",
      "target_ref": "x-ally-event--0f8e58b5-2d92-5ae6-8dd2-7cfabcad30c6",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "El Camino Health",
          "url": "https://oag.ca.gov/system/files/El%20Camino%20-%20California%20Notification.pdf",
          "external_id": "cit:d9e01161-e4eb-4219-a6d7-6eaa657a3562",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:124cfcacca9e0564a8567800fa1b176148fe6eaa037a4c22d79a0d1bb28cd853"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--071f1eca-fd00-5266-8658-3b652bb1525f",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:b967fc5e-42d3-4ec8-8cf6-da16fec5bc1e",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "El Camino Health",
          "url": "https://oag.ca.gov/system/files/El%20Camino%20-%20California%20Notification.pdf",
          "external_id": "cit:ddefe67d-98a8-4879-b946-bad578cea6c8",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:124cfcacca9e0564a8567800fa1b176148fe6eaa037a4c22d79a0d1bb28cd853"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-09-02"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--16e47e3d-f48f-55e0-8235-c722fc8d32e9",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:89e866d6-2a92-4fb5-ac6b-00f9a0d09db1",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "El Camino Health",
          "url": "https://oag.ca.gov/system/files/El%20Camino%20-%20California%20Notification.pdf",
          "external_id": "cit:dd769328-0de4-46df-a990-56b91fdf5f5c",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:124cfcacca9e0564a8567800fa1b176148fe6eaa037a4c22d79a0d1bb28cd853"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Documents were copied or downloaded. Potential fields included contacts, identity numbers, birth dates, patient identifiers, diagnoses, treatment, prescriptions, provider and insurance information; some patients’ bank details could also be involved."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--555cad5f-328a-59d6-8e94-a287253cb2de",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:c28b7517-5e49-46b4-8393-72d896cc5328",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "El Camino Health",
          "url": "https://oag.ca.gov/system/files/El%20Camino%20-%20California%20Notification.pdf",
          "external_id": "cit:53dcf78a-fdf5-4e38-8e25-62d802f76d58",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:124cfcacca9e0564a8567800fa1b176148fe6eaa037a4c22d79a0d1bb28cd853"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-09-01"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--a28aeef9-44c0-5ab8-8b40-da080658a2cd",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:ae912caa-0c33-4c82-9bd7-acd5d75cb831",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "El Camino Health",
          "url": "https://oag.ca.gov/system/files/El%20Camino%20-%20California%20Notification.pdf",
          "external_id": "cit:8de04af0-8901-4b9a-9340-74c9c28a62d3",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:124cfcacca9e0564a8567800fa1b176148fe6eaa037a4c22d79a0d1bb28cd853"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-09-01"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--cc050a92-369d-5584-8dcb-5b18266828d6",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:ee5bc61a-2acb-4cee-8ce7-d73f51944ca9",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "El Camino Health",
          "url": "https://oag.ca.gov/system/files/El%20Camino%20-%20California%20Notification.pdf",
          "external_id": "cit:4d4af4e7-8cf1-4c19-ba82-6419a7cb73db",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:124cfcacca9e0564a8567800fa1b176148fe6eaa037a4c22d79a0d1bb28cd853"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "El Camino secured the system, engaged forensic experts, notified law enforcement and added safeguards. Document review remained ongoing, and the notice offered a year of identity monitoring."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--d02692e8-8835-55be-881b-37eb993650c3",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:7961627d-e8e8-4ce3-9a59-21459ed80803",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "El Camino Health",
          "url": "https://oag.ca.gov/system/files/El%20Camino%20-%20California%20Notification.pdf",
          "external_id": "cit:48cea3cf-7b8f-4a9a-8daa-c85832dcb6b9",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:124cfcacca9e0564a8567800fa1b176148fe6eaa037a4c22d79a0d1bb28cd853"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "El Camino Health identified unusual Microsoft 365 activity on September 1, 2026. Investigators found intermittent unauthorized access to four employee accounts from August 26 through September 2."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--f3805434-bae1-5778-8e81-a9785725b727",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:007d243b-f6e0-4477-b8d6-c0008796e3a3",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "El Camino Health",
          "url": "https://oag.ca.gov/system/files/El%20Camino%20-%20California%20Notification.pdf",
          "external_id": "cit:69c9a08a-258d-47cd-9c9b-6a192321e35c",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:124cfcacca9e0564a8567800fa1b176148fe6eaa037a4c22d79a0d1bb28cd853"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-08-26"
      }
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--0f8e58b5-2d92-5ae6-8dd2-7cfabcad30c6",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "evt:1802d022-dccd-4c97-92e7-fe964be5d3ce",
      "name": "Reported unauthorized access begins"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--57c45af8-6e14-5c6a-8fd9-84117d334509",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "evt:5fe7d524-18bc-45e7-8910-5eb21efa0f83",
      "name": "Reported access window ends"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--9760445d-4f37-5b9a-830b-90f9fdf6b671",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "evt:286002c6-65f1-4763-a3e9-3b77a2353a0c",
      "name": "Unusual activity detected"
    }
  ]
}