{
  "type": "bundle",
  "id": "bundle--fa8a508b-e7fc-56b1-80b3-5137e4d751bd",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--ef65f0a7-8551-5ee1-851a-e9766e6b3029",
      "created": "2026-10-17T14:12:14.448783+00:00",
      "modified": "2026-10-17T14:12:14.448783+00:00",
      "x_ally_original_id": "org:d15f2542-76a4-43cf-8f97-654bc8fd39ea",
      "name": "Educational Testing Service",
      "identity_class": "organization"
    },
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--f8791a61-e5c5-5173-87ce-2191d2d1f5dc",
      "created": "2026-10-17T14:12:14.448783+00:00",
      "modified": "2026-10-17T14:12:14.448783+00:00",
      "x_ally_original_id": "org:557ac74e-f9a1-4ade-9637-6a37768378e9",
      "name": "California Department of Education",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--25bacfad-21b4-5602-8800-0e2506028c11",
      "created": "2026-10-17T14:12:14.448783+00:00",
      "modified": "2026-10-17T14:12:14.448783+00:00",
      "x_ally_original_id": "inc:877c7753-0746-4082-8be9-926c13f511d9",
      "name": "ETS California student-data breach"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--8e4ccb79-0d9b-5a80-8835-2bde0fde833b",
      "created": "2026-10-17T14:12:14.448783+00:00",
      "modified": "2026-10-17T14:12:14.448783+00:00",
      "x_ally_original_id": "brh:7329c9dc-9fe0-4424-9700-9738d1e5f4cd",
      "name": "ETS California student-data breach"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--07e91780-dd03-5ec3-811e-dc1ea36eeae2",
      "created": "2026-10-17T14:12:14.448783+00:00",
      "modified": "2026-10-17T14:12:14.448783+00:00",
      "x_ally_original_id": "clm:0f7cb0df-2de0-464d-bb4b-7a5f6240103c",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--ccd357e7-c93d-55a0-8ac7-d0a1bbb0efbb",
      "target_ref": "x-ally-data-category--a2b7dd9d-0c02-5710-88ed-ea507d0ffa07",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Educational Testing Service",
          "url": "https://oag.ca.gov/system/files/Notice%20of%20Data%20Breach_3_Redacted.pdf",
          "external_id": "cit:44fbda38-717f-4883-853f-1e07540bb4cb",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5808ed8cfdd2c371cda9079d79602f2ed1c0f318e9de76f425a6f984601f718f"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--0c8d8556-09fc-5494-83a8-0c76bbb8f169",
      "created": "2026-10-17T14:12:14.448783+00:00",
      "modified": "2026-10-17T14:12:14.448783+00:00",
      "x_ally_original_id": "clm:b4d7320f-6ea4-4f8d-863b-29a1e2d204fc",
      "relationship_type": "affected-organization",
      "source_ref": "incident--25bacfad-21b4-5602-8800-0e2506028c11",
      "target_ref": "identity--f8791a61-e5c5-5173-87ce-2191d2d1f5dc",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Educational Testing Service",
          "url": "https://oag.ca.gov/system/files/Notice%20of%20Data%20Breach_3_Redacted.pdf",
          "external_id": "cit:416c27f4-d698-463c-8a2c-00efa55ad599",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5808ed8cfdd2c371cda9079d79602f2ed1c0f318e9de76f425a6f984601f718f"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--16494191-5592-56f6-84a4-f6315bff27c3",
      "created": "2026-10-17T14:12:14.448783+00:00",
      "modified": "2026-10-17T14:12:14.448783+00:00",
      "x_ally_original_id": "clm:a93c0a3f-bd73-4f29-9747-eedd0befb875",
      "relationship_type": "resulted-in",
      "source_ref": "incident--25bacfad-21b4-5602-8800-0e2506028c11",
      "target_ref": "x-ally-event--262e3a37-f1a8-52cb-83fe-97d8a6555201",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "California Department of Justice, Office of the Attorney General",
          "url": "https://oag.ca.gov/privacy/databreach/list",
          "external_id": "cit:bcd9fecd-7076-4706-b904-ffae8fb6a4ac",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:be56d4677575d2a793bcf2d2e3a68e4c46d1faa21b5aa6014ad50aa15dcea090"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--1a7856da-e046-5a6e-8609-414a51f42427",
      "created": "2026-10-17T14:12:14.448783+00:00",
      "modified": "2026-10-17T14:12:14.448783+00:00",
      "x_ally_original_id": "clm:c1b02e56-56dc-4273-ba0d-4a325d0c12d9",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--ccd357e7-c93d-55a0-8ac7-d0a1bbb0efbb",
      "target_ref": "x-ally-data-category--145a20ea-fecc-5f7d-8452-8f571359a568",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Educational Testing Service",
          "url": "https://oag.ca.gov/system/files/Notice%20of%20Data%20Breach_3_Redacted.pdf",
          "external_id": "cit:38c80b47-1a25-4cd2-aeb5-f81c8a039715",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5808ed8cfdd2c371cda9079d79602f2ed1c0f318e9de76f425a6f984601f718f"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--203cf67c-3acd-5cb2-8cbb-2aa7223aab45",
      "created": "2026-10-17T14:12:14.448783+00:00",
      "modified": "2026-10-17T14:12:14.448783+00:00",
      "x_ally_original_id": "clm:8f7c8fd4-8173-40ac-99ea-27261e1d5c43",
      "relationship_type": "resulted-in",
      "source_ref": "incident--25bacfad-21b4-5602-8800-0e2506028c11",
      "target_ref": "x-ally-event--090b3b17-f42b-5a54-8a68-492d4932a875",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Educational Testing Service",
          "url": "https://oag.ca.gov/system/files/Notice%20of%20Data%20Breach_3_Redacted.pdf",
          "external_id": "cit:271ed068-3f18-465c-b953-159474d9dd7f",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5808ed8cfdd2c371cda9079d79602f2ed1c0f318e9de76f425a6f984601f718f"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--22ef914d-58ae-5c07-8bc9-ff017f939431",
      "created": "2026-10-17T14:12:14.448783+00:00",
      "modified": "2026-10-17T14:12:14.448783+00:00",
      "x_ally_original_id": "clm:9aa20161-d9d9-445a-95c7-d4ff8016a995",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--ccd357e7-c93d-55a0-8ac7-d0a1bbb0efbb",
      "target_ref": "x-ally-data-category--40ba6c78-b66b-5dcd-8ee9-5f2789f80585",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Educational Testing Service",
          "url": "https://oag.ca.gov/system/files/Notice%20of%20Data%20Breach_3_Redacted.pdf",
          "external_id": "cit:5637d194-4240-4596-acbf-584b57eef00b",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5808ed8cfdd2c371cda9079d79602f2ed1c0f318e9de76f425a6f984601f718f"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--2ddf8b86-1d23-5314-855c-77137296309d",
      "created": "2026-10-17T14:12:14.448783+00:00",
      "modified": "2026-10-17T14:12:14.448783+00:00",
      "x_ally_original_id": "clm:0440c622-ff30-4d77-ba52-89ee198afc1c",
      "relationship_type": "resulted-in",
      "source_ref": "incident--25bacfad-21b4-5602-8800-0e2506028c11",
      "target_ref": "x-ally-data-exposure--ccd357e7-c93d-55a0-8ac7-d0a1bbb0efbb",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Educational Testing Service",
          "url": "https://oag.ca.gov/system/files/Notice%20of%20Data%20Breach_3_Redacted.pdf",
          "external_id": "cit:6d0a5bf6-7dbd-4d0d-b30b-e86d69ad0a5f",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5808ed8cfdd2c371cda9079d79602f2ed1c0f318e9de76f425a6f984601f718f"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--419522f0-4044-5721-88b9-bad8bc8961bd",
      "created": "2026-10-17T14:12:14.448783+00:00",
      "modified": "2026-10-17T14:12:14.448783+00:00",
      "x_ally_original_id": "clm:ba038924-57f7-4d46-b04f-118f3649c0d5",
      "relationship_type": "resulted-in",
      "source_ref": "incident--25bacfad-21b4-5602-8800-0e2506028c11",
      "target_ref": "x-ally-event--9e0846a1-a76c-5b19-8e51-e9b2a57f49c1",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Educational Testing Service",
          "url": "https://oag.ca.gov/system/files/Notice%20of%20Data%20Breach_3_Redacted.pdf",
          "external_id": "cit:7a25c26a-0ebc-43b3-ad4b-b946d0a3abfd",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5808ed8cfdd2c371cda9079d79602f2ed1c0f318e9de76f425a6f984601f718f"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--5d8d4d7d-4da4-5249-8cb0-45c82525486e",
      "created": "2026-10-17T14:12:14.448783+00:00",
      "modified": "2026-10-17T14:12:14.448783+00:00",
      "x_ally_original_id": "clm:25626c41-d63b-4871-bd25-e696422f68ff",
      "relationship_type": "processor-for",
      "source_ref": "identity--ef65f0a7-8551-5ee1-851a-e9766e6b3029",
      "target_ref": "identity--f8791a61-e5c5-5173-87ce-2191d2d1f5dc",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Educational Testing Service",
          "url": "https://oag.ca.gov/system/files/Notice%20of%20Data%20Breach_3_Redacted.pdf",
          "external_id": "cit:374a9b5d-284f-4d3d-ae20-40725c45bb93",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5808ed8cfdd2c371cda9079d79602f2ed1c0f318e9de76f425a6f984601f718f"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--77433c19-7ea4-5cd2-8cdc-5ccf002bac97",
      "created": "2026-10-17T14:12:14.448783+00:00",
      "modified": "2026-10-17T14:12:14.448783+00:00",
      "x_ally_original_id": "clm:5ce0ae31-2a42-480b-adde-126a0505ef21",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--ccd357e7-c93d-55a0-8ac7-d0a1bbb0efbb",
      "target_ref": "x-ally-data-category--093aeb42-8d5e-50fa-8985-62be3906b906",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Educational Testing Service",
          "url": "https://oag.ca.gov/system/files/Notice%20of%20Data%20Breach_3_Redacted.pdf",
          "external_id": "cit:852ffd7e-9226-4e34-99f3-60c236ce9868",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5808ed8cfdd2c371cda9079d79602f2ed1c0f318e9de76f425a6f984601f718f"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--8210f3f5-f2e7-5023-8fe9-ed5d784b2d21",
      "created": "2026-10-17T14:12:14.448783+00:00",
      "modified": "2026-10-17T14:12:14.448783+00:00",
      "x_ally_original_id": "clm:b37cd718-4a37-42f4-ba28-18b4214d193e",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--ccd357e7-c93d-55a0-8ac7-d0a1bbb0efbb",
      "target_ref": "x-ally-data-category--c79f34f3-405d-57d2-8409-98eff3898231",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Educational Testing Service",
          "url": "https://oag.ca.gov/system/files/Notice%20of%20Data%20Breach_3_Redacted.pdf",
          "external_id": "cit:4574224f-e9b4-4c51-ae57-05b7bf010cd4",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5808ed8cfdd2c371cda9079d79602f2ed1c0f318e9de76f425a6f984601f718f"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--9a2a758d-fbcf-56ef-8d6e-14fc23307fe5",
      "created": "2026-10-17T14:12:14.448783+00:00",
      "modified": "2026-10-17T14:12:14.448783+00:00",
      "x_ally_original_id": "clm:f067da71-e312-471e-b1e4-4f425ad54e50",
      "relationship_type": "resulted-in",
      "source_ref": "incident--25bacfad-21b4-5602-8800-0e2506028c11",
      "target_ref": "x-ally-event--d7e7ad23-4b10-5e9c-8547-5c6a859ac723",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Educational Testing Service",
          "url": "https://oag.ca.gov/system/files/Notice%20of%20Data%20Breach_3_Redacted.pdf",
          "external_id": "cit:7fef44a8-6006-4ba3-8eb8-51a6dcabdead",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5808ed8cfdd2c371cda9079d79602f2ed1c0f318e9de76f425a6f984601f718f"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--b09c2ca4-4dd3-5298-8245-737171bdf3f3",
      "created": "2026-10-17T14:12:14.448783+00:00",
      "modified": "2026-10-17T14:12:14.448783+00:00",
      "x_ally_original_id": "clm:2a4cad84-7907-446d-9488-4fd861ed7972",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--ccd357e7-c93d-55a0-8ac7-d0a1bbb0efbb",
      "target_ref": "x-ally-data-category--7a11e0d7-8a56-5035-8ece-5d612f9a0715",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Educational Testing Service",
          "url": "https://oag.ca.gov/system/files/Notice%20of%20Data%20Breach_3_Redacted.pdf",
          "external_id": "cit:c86cc58c-47cb-45bc-9761-d8e26a0bdd06",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5808ed8cfdd2c371cda9079d79602f2ed1c0f318e9de76f425a6f984601f718f"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--db90f9cd-7cc5-5e38-80de-5674903ca0de",
      "created": "2026-10-17T14:12:14.448783+00:00",
      "modified": "2026-10-17T14:12:14.448783+00:00",
      "x_ally_original_id": "clm:f7cda356-93e0-4dcf-b878-49729907969a",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--ccd357e7-c93d-55a0-8ac7-d0a1bbb0efbb",
      "target_ref": "x-ally-data-category--ff2c8174-4feb-535f-8a4d-be23ee26eff2",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Educational Testing Service",
          "url": "https://oag.ca.gov/system/files/Notice%20of%20Data%20Breach_3_Redacted.pdf",
          "external_id": "cit:99066d6f-d50e-47c0-bc77-bf4e26505761",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5808ed8cfdd2c371cda9079d79602f2ed1c0f318e9de76f425a6f984601f718f"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--ec7b46b2-83bf-5aa7-861d-eb2467a32931",
      "created": "2026-10-17T14:12:14.448783+00:00",
      "modified": "2026-10-17T14:12:14.448783+00:00",
      "x_ally_original_id": "clm:77521efa-9a13-4dc5-81cd-b8ef794b576f",
      "relationship_type": "affected-organization",
      "source_ref": "incident--25bacfad-21b4-5602-8800-0e2506028c11",
      "target_ref": "identity--ef65f0a7-8551-5ee1-851a-e9766e6b3029",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Educational Testing Service",
          "url": "https://oag.ca.gov/system/files/Notice%20of%20Data%20Breach_3_Redacted.pdf",
          "external_id": "cit:ffa6522d-8f4c-43ce-9198-8f88e664690c",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5808ed8cfdd2c371cda9079d79602f2ed1c0f318e9de76f425a6f984601f718f"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--02c0ee16-a7ba-588f-8d25-78d11323a287",
      "created": "2026-10-17T14:12:14.448783+00:00",
      "modified": "2026-10-17T14:12:14.448783+00:00",
      "x_ally_original_id": "clm:6420b845-6814-4f3d-8483-8dd649a27761",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "California Department of Justice, Office of the Attorney General",
          "url": "https://oag.ca.gov/privacy/databreach/list",
          "external_id": "cit:53018cd1-591f-4bfb-bdf1-d714160d2c3b",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:be56d4677575d2a793bcf2d2e3a68e4c46d1faa21b5aa6014ad50aa15dcea090"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The California registry recorded the CDE notice."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--0c5f388d-ced9-519c-8b00-e5844884a416",
      "created": "2026-10-17T14:12:14.448783+00:00",
      "modified": "2026-10-17T14:12:14.448783+00:00",
      "x_ally_original_id": "clm:6f9533bc-b6d0-4bf6-bc09-c530c0398f78",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Educational Testing Service",
          "url": "https://oag.ca.gov/system/files/Notice%20of%20Data%20Breach_3_Redacted.pdf",
          "external_id": "cit:56233a7d-e4e1-4d1f-97e7-02f3ac71d1f7",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5808ed8cfdd2c371cda9079d79602f2ed1c0f318e9de76f425a6f984601f718f"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Fields vary by individual and may include student identity and address, school and district, grade, student identifiers, demographic and language information, disability and accommodation details, program eligibility, and assessment participation and results."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--123fef61-a966-5d9e-856d-3297f86c1fae",
      "created": "2026-10-17T14:12:14.448783+00:00",
      "modified": "2026-10-17T14:12:14.448783+00:00",
      "x_ally_original_id": "clm:78f59592-2ffd-4907-8c5e-ab313768659b",
      "confidence": 100,
      "external_references": [],
      "x_ally_claim_object": {
        "kind": "iri",
        "value": "https://attack.mitre.org/techniques/T1078/"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--16e8bf5d-add5-55de-8695-194c8f3c29c9",
      "created": "2026-10-17T14:12:14.448783+00:00",
      "modified": "2026-10-17T14:12:14.448783+00:00",
      "x_ally_original_id": "clm:304f30a3-ab80-4e8d-88ce-ea626e078367",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Educational Testing Service",
          "url": "https://oag.ca.gov/system/files/Notice%20of%20Data%20Breach_3_Redacted.pdf",
          "external_id": "cit:2a9e65ff-4b51-4bdc-bc87-361a2b9a3e29",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5808ed8cfdd2c371cda9079d79602f2ed1c0f318e9de76f425a6f984601f718f"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "ETS said the copied data excluded Social Security, driver’s license and passport numbers, financial and card information, passwords, and parent or guardian personal information."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--34a6a7e3-add3-5db2-8339-07bd6dd47a5f",
      "created": "2026-10-17T14:12:14.448783+00:00",
      "modified": "2026-10-17T14:12:14.448783+00:00",
      "x_ally_original_id": "clm:f9662c38-c1c4-4c86-b30b-243023ccca62",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Educational Testing Service",
          "url": "https://oag.ca.gov/system/files/Notice%20of%20Data%20Breach_3_Redacted.pdf",
          "external_id": "cit:c8b4e165-09f9-4d45-a1f4-e6e8da150c52",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5808ed8cfdd2c371cda9079d79602f2ed1c0f318e9de76f425a6f984601f718f"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "ETS said it was building a replacement SFTP site with enhanced security controls."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--39421ebd-8dd7-598b-81d5-263cb76017c2",
      "created": "2026-10-17T14:12:14.448783+00:00",
      "modified": "2026-10-17T14:12:14.448783+00:00",
      "x_ally_original_id": "clm:fa7fcb81-58e8-4090-8eb4-eb0b341c8b70",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Educational Testing Service",
          "url": "https://oag.ca.gov/system/files/Notice%20of%20Data%20Breach_3_Redacted.pdf",
          "external_id": "cit:819d4341-12bf-4df8-aeee-72d81966f2b2",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5808ed8cfdd2c371cda9079d79602f2ed1c0f318e9de76f425a6f984601f718f"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "ETS identified activity involving the student-information SFTP site."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--3b9aa1f2-b43e-577d-8daa-c3ba212faa09",
      "created": "2026-10-17T14:12:14.448783+00:00",
      "modified": "2026-10-17T14:12:14.448783+00:00",
      "x_ally_original_id": "clm:4cbd0dde-f795-48f2-8d99-bd48669d9645",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Educational Testing Service",
          "url": "https://oag.ca.gov/system/files/Notice%20of%20Data%20Breach_3_Redacted.pdf",
          "external_id": "cit:7b0559d7-f10f-4782-b467-1f7ab4b68a45",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5808ed8cfdd2c371cda9079d79602f2ed1c0f318e9de76f425a6f984601f718f"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Last date in the reported credential-use interval."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--4f66929e-9624-55ac-8953-4df00a638759",
      "created": "2026-10-17T14:12:14.448783+00:00",
      "modified": "2026-10-17T14:12:14.448783+00:00",
      "x_ally_original_id": "clm:82d4e602-6a5b-4a62-9401-ad175c741bba",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "California Department of Justice, Office of the Attorney General",
          "url": "https://oag.ca.gov/privacy/databreach/list",
          "external_id": "cit:b1e47db2-e29e-483b-a349-87cefac09d4e",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:be56d4677575d2a793bcf2d2e3a68e4c46d1faa21b5aa6014ad50aa15dcea090"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-16"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--5c8590b5-f886-54cd-8f3c-61bc4cfa3ea6",
      "created": "2026-10-17T14:12:14.448783+00:00",
      "modified": "2026-10-17T14:12:14.448783+00:00",
      "x_ally_original_id": "clm:95587e23-f4b8-4221-9203-50c09e79cb3f",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Educational Testing Service",
          "url": "https://oag.ca.gov/system/files/Notice%20of%20Data%20Breach_3_Redacted.pdf",
          "external_id": "cit:d01e60e7-78fa-46ec-bcbb-7bf07d1019a6",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5808ed8cfdd2c371cda9079d79602f2ed1c0f318e9de76f425a6f984601f718f"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-05-22"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--61b9b3e6-7ec6-59c5-8a42-e40e5c3a75f1",
      "created": "2026-10-17T14:12:14.448783+00:00",
      "modified": "2026-10-17T14:12:14.448783+00:00",
      "x_ally_original_id": "clm:03b83d8e-bbbd-4370-a01b-4c40cfbd90d1",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Educational Testing Service",
          "url": "https://oag.ca.gov/system/files/Notice%20of%20Data%20Breach_3_Redacted.pdf",
          "external_id": "cit:4c422a27-8800-485b-8284-963cac4a94c1",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5808ed8cfdd2c371cda9079d79602f2ed1c0f318e9de76f425a6f984601f718f"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "ETS offered affected current and former students two years of identity-protection services through Experian."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--643340dd-da40-5d5f-82b8-209f965f7dc4",
      "created": "2026-10-17T14:12:14.448783+00:00",
      "modified": "2026-10-17T14:12:14.448783+00:00",
      "x_ally_original_id": "clm:1c93e895-8131-4780-b668-174e5e1a0abd",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Educational Testing Service",
          "url": "https://oag.ca.gov/system/files/Notice%20of%20Data%20Breach_3_Redacted.pdf",
          "external_id": "cit:4086a0d0-8215-4657-b8dc-f502a1515612",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5808ed8cfdd2c371cda9079d79602f2ed1c0f318e9de76f425a6f984601f718f"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "CDE and the State Board of Education were reviewing the incident and ETS’s compliance with security and contractual requirements, with support from state cybersecurity authorities."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--68f6f490-3b1a-5d89-8c5b-88f7404f2fa3",
      "created": "2026-10-17T14:12:14.448783+00:00",
      "modified": "2026-10-17T14:12:14.448783+00:00",
      "x_ally_original_id": "clm:6a74c304-9d32-4f76-a61f-253463e818cb",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Educational Testing Service",
          "url": "https://oag.ca.gov/system/files/Notice%20of%20Data%20Breach_3_Redacted.pdf",
          "external_id": "cit:f6dce14e-b862-409a-83dd-94b5a6d2483f",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5808ed8cfdd2c371cda9079d79602f2ed1c0f318e9de76f425a6f984601f718f"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "ETS disabled the account, took the SFTP site offline, and engaged external cybersecurity experts."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--6bc6dd57-3016-597f-8ebb-7dd8f2dcabd1",
      "created": "2026-10-17T14:12:14.448783+00:00",
      "modified": "2026-10-17T14:12:14.448783+00:00",
      "x_ally_original_id": "clm:90c457df-7f29-46b0-b6db-fc48738270eb",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Educational Testing Service",
          "url": "https://oag.ca.gov/system/files/Notice%20of%20Data%20Breach_3_Redacted.pdf",
          "external_id": "cit:6112b36f-64c6-47d9-8652-f7273879ff6d",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5808ed8cfdd2c371cda9079d79602f2ed1c0f318e9de76f425a6f984601f718f"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Start of the reported credential-use interval."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--803a4ec8-746c-517c-846c-880a0027f206",
      "created": "2026-10-17T14:12:14.448783+00:00",
      "modified": "2026-10-17T14:12:14.448783+00:00",
      "x_ally_original_id": "clm:e6715485-507b-4ea9-86ec-787dad7a0e53",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Educational Testing Service",
          "url": "https://oag.ca.gov/system/files/Notice%20of%20Data%20Breach_3_Redacted.pdf",
          "external_id": "cit:ef34b6f0-bf9f-4988-b271-f560a9fd2cd3",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5808ed8cfdd2c371cda9079d79602f2ed1c0f318e9de76f425a6f984601f718f"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-09-18"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--a34ce52c-1b8c-5a56-82a0-7a40f1d46ec7",
      "created": "2026-10-17T14:12:14.448783+00:00",
      "modified": "2026-10-17T14:12:14.448783+00:00",
      "x_ally_original_id": "clm:5c25479a-ea3a-48bb-937d-3a239e57914f",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Educational Testing Service",
          "url": "https://oag.ca.gov/system/files/Notice%20of%20Data%20Breach_3_Redacted.pdf",
          "external_id": "cit:b17af463-9b7f-4255-adb7-5c4d9d544dd8",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5808ed8cfdd2c371cda9079d79602f2ed1c0f318e9de76f425a6f984601f718f"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "An unauthorized party used a compromised login credential at various times from May 22 through September 18, 2026, to access an ETS SFTP site and copy California student files."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--ac88dfd7-8604-5ffc-8084-d3b504e1f0ef",
      "created": "2026-10-17T14:12:14.448783+00:00",
      "modified": "2026-10-17T14:12:14.448783+00:00",
      "x_ally_original_id": "clm:79b87dd9-dbd7-48ec-886c-e3ae300ef6af",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Educational Testing Service",
          "url": "https://oag.ca.gov/system/files/Notice%20of%20Data%20Breach_3_Redacted.pdf",
          "external_id": "cit:5856ecfb-4bd0-4a1c-9b2f-1ba5eedaf1d9",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5808ed8cfdd2c371cda9079d79602f2ed1c0f318e9de76f425a6f984601f718f"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-05-22"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--b9cba2e2-2e9f-5265-81ab-f95076f95b25",
      "created": "2026-10-17T14:12:14.448783+00:00",
      "modified": "2026-10-17T14:12:14.448783+00:00",
      "x_ally_original_id": "clm:9682adf0-7a63-4416-bcf5-8896239be28b",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "California Department of Justice, Office of the Attorney General",
          "url": "https://oag.ca.gov/privacy/databreach/list",
          "external_id": "cit:a7d3c48d-53fb-477f-923a-0965ea379c3d",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:be56d4677575d2a793bcf2d2e3a68e4c46d1faa21b5aa6014ad50aa15dcea090"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-16"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--c7889819-39aa-585d-8c29-21d68d02f0d1",
      "created": "2026-10-17T14:12:14.448783+00:00",
      "modified": "2026-10-17T14:12:14.448783+00:00",
      "x_ally_original_id": "clm:750d8e0b-28bb-43de-82fb-bcd38bd457d1",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Educational Testing Service",
          "url": "https://oag.ca.gov/system/files/Notice%20of%20Data%20Breach_3_Redacted.pdf",
          "external_id": "cit:48a3f830-3dc3-429c-9da1-73c1256d00ff",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5808ed8cfdd2c371cda9079d79602f2ed1c0f318e9de76f425a6f984601f718f"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-09-25"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--ccce36a8-c8ff-5c43-8331-20197fb84104",
      "created": "2026-10-17T14:12:14.448783+00:00",
      "modified": "2026-10-17T14:12:14.448783+00:00",
      "x_ally_original_id": "clm:aee36b52-fa61-4c1b-9c36-dcaac763c396",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Educational Testing Service",
          "url": "https://oag.ca.gov/system/files/Notice%20of%20Data%20Breach_3_Redacted.pdf",
          "external_id": "cit:f9c89553-35fd-41d0-82f9-4df38ad52da9",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5808ed8cfdd2c371cda9079d79602f2ed1c0f318e9de76f425a6f984601f718f"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The copied information covers California students, including but not limited to all students enrolled in the three previous school years."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--de4c580a-c123-5be1-8430-659546cce616",
      "created": "2026-10-17T14:12:14.448783+00:00",
      "modified": "2026-10-17T14:12:14.448783+00:00",
      "x_ally_original_id": "clm:f3cdcdf6-4710-4e96-a54b-8831ec582f61",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Educational Testing Service",
          "url": "https://oag.ca.gov/system/files/Notice%20of%20Data%20Breach_3_Redacted.pdf",
          "external_id": "cit:53f5d552-b72c-4288-b7a6-d97fb007f6c7",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5808ed8cfdd2c371cda9079d79602f2ed1c0f318e9de76f425a6f984601f718f"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-09-25"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--df2c2fda-33d1-5477-82a5-8b7ccc7fa544",
      "created": "2026-10-17T14:12:14.448783+00:00",
      "modified": "2026-10-17T14:12:14.448783+00:00",
      "x_ally_original_id": "clm:d0596869-ecf4-4cba-a616-9ab651d96a23",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Educational Testing Service",
          "url": "https://oag.ca.gov/system/files/Notice%20of%20Data%20Breach_3_Redacted.pdf",
          "external_id": "cit:2a6f13cf-869e-498c-8c1c-1855bd4f21b1",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5808ed8cfdd2c371cda9079d79602f2ed1c0f318e9de76f425a6f984601f718f"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The affected SFTP site exchanged California statewide assessment information with CDE."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--eb644d19-f4fe-56b1-88d0-b09ac1f13318",
      "created": "2026-10-17T14:12:14.448783+00:00",
      "modified": "2026-10-17T14:12:14.448783+00:00",
      "x_ally_original_id": "clm:304c5def-6b3c-4654-9aef-3a70a0abcaae",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Educational Testing Service",
          "url": "https://oag.ca.gov/system/files/Notice%20of%20Data%20Breach_3_Redacted.pdf",
          "external_id": "cit:2c982de6-7c90-49fa-a91f-a1d8c0ae2418",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5808ed8cfdd2c371cda9079d79602f2ed1c0f318e9de76f425a6f984601f718f"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-09-18"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--f3e7df33-2304-5c5b-8372-f56d3e919f91",
      "created": "2026-10-17T14:12:14.448783+00:00",
      "modified": "2026-10-17T14:12:14.448783+00:00",
      "x_ally_original_id": "clm:f1670141-a937-41b4-9c66-ff79f39b7aca",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Educational Testing Service",
          "url": "https://oag.ca.gov/system/files/Notice%20of%20Data%20Breach_3_Redacted.pdf",
          "external_id": "cit:de911eb2-d794-4a23-a054-80979ff2285c",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5808ed8cfdd2c371cda9079d79602f2ed1c0f318e9de76f425a6f984601f718f"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "ETS said its monitoring had not found evidence that the information had been made public as of the notice."
      }
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--093aeb42-8d5e-50fa-8985-62be3906b906",
      "created": "2026-08-09T01:29:00Z",
      "modified": "2026-08-09T01:29:00Z",
      "x_ally_original_id": "dat:0fde3b95-2268-47f0-973b-387ce3d98e00",
      "name": "Education records"
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--145a20ea-fecc-5f7d-8452-8f571359a568",
      "created": "2026-08-09T01:29:00Z",
      "modified": "2026-08-09T01:29:00Z",
      "x_ally_original_id": "dat:ba481af6-f599-410d-9cac-a181cb7ba4a9",
      "name": "Disability and special-education information"
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--40ba6c78-b66b-5dcd-8ee9-5f2789f80585",
      "created": "2026-08-09T01:29:00Z",
      "modified": "2026-08-09T01:29:00Z",
      "x_ally_original_id": "dat:41d26529-cba1-47c1-b528-25e4c18aedb2",
      "name": "Demographic information"
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--7a11e0d7-8a56-5035-8ece-5d612f9a0715",
      "created": "2026-08-09T01:29:00Z",
      "modified": "2026-08-09T01:29:00Z",
      "x_ally_original_id": "dat:c957c17d-7786-41c2-9026-11c7153f54d2",
      "name": "Student identifiers"
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--a2b7dd9d-0c02-5710-88ed-ea507d0ffa07",
      "created": "2026-08-08T23:12:00Z",
      "modified": "2026-08-08T23:12:00Z",
      "x_ally_original_id": "dat:559cf3f5-80c7-45ba-a930-ff0bfa8d17b0",
      "name": "Names"
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--c79f34f3-405d-57d2-8409-98eff3898231",
      "created": "2026-08-08T23:12:00Z",
      "modified": "2026-08-08T23:12:00Z",
      "x_ally_original_id": "dat:5abcee7e-4a37-494a-b6ba-87ff46149be9",
      "name": "Contact information"
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--ff2c8174-4feb-535f-8a4d-be23ee26eff2",
      "created": "2026-08-08T23:12:00Z",
      "modified": "2026-08-08T23:12:00Z",
      "x_ally_original_id": "dat:ad54319a-bb47-40fb-be6c-7fd6e2aa1f68",
      "name": "Dates of birth"
    },
    {
      "type": "x-ally-data-exposure",
      "spec_version": "2.1",
      "id": "x-ally-data-exposure--ccd357e7-c93d-55a0-8ac7-d0a1bbb0efbb",
      "created": "2026-10-17T14:12:14.448783+00:00",
      "modified": "2026-10-17T14:12:14.448783+00:00",
      "x_ally_original_id": "exp:be1cdffa-f53d-4c46-8c8f-3a8ce54ea56b",
      "name": "Copied California student assessment files"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--090b3b17-f42b-5a54-8a68-492d4932a875",
      "created": "2026-10-17T14:12:14.448783+00:00",
      "modified": "2026-10-17T14:12:14.448783+00:00",
      "x_ally_original_id": "evt:72fc0768-a30f-47fe-97cd-233a84f5435e",
      "name": "Reported access interval ended"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--262e3a37-f1a8-52cb-83fe-97d8a6555201",
      "created": "2026-10-17T14:12:14.448783+00:00",
      "modified": "2026-10-17T14:12:14.448783+00:00",
      "x_ally_original_id": "evt:4dca24cb-b5e7-42d6-a8ef-0e454b0a7a03",
      "name": "Notice filed with California"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--9e0846a1-a76c-5b19-8e51-e9b2a57f49c1",
      "created": "2026-10-17T14:12:14.448783+00:00",
      "modified": "2026-10-17T14:12:14.448783+00:00",
      "x_ally_original_id": "evt:408849cc-ff2e-4bf6-9693-8b99b6f9722c",
      "name": "Unauthorized access began"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--d7e7ad23-4b10-5e9c-8547-5c6a859ac723",
      "created": "2026-10-17T14:12:14.448783+00:00",
      "modified": "2026-10-17T14:12:14.448783+00:00",
      "x_ally_original_id": "evt:abb484ac-a70e-4f77-8850-dfce3d30c21c",
      "name": "ETS detected unauthorized activity"
    }
  ]
}