{
  "type": "bundle",
  "id": "bundle--fba7cb29-ef88-56a5-8a27-64d978fbdead",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--5cd1a705-5eba-5918-8a83-b93e51a6f709",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "org:9db1ece0-cc88-5362-b985-14a4de09a2f0",
      "name": "Farmers Insurance",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--4227b62c-3774-5474-836d-afa8f9f6daf3",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "inc:8711d7be-a87a-519e-a236-a729e37bad1c",
      "name": "Farmers Insurance security incident"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--e47bc37f-3dc0-5c80-87ff-e0db52bc7c89",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "brh:896d4cb4-d1a1-5c6b-8095-46adc76956fe",
      "name": "Farmers Insurance security incident"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--e2ea6151-65d7-59e1-8ea6-65aa84c7e798",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "clm:54ec6387-6926-5784-b7b5-611f6b95f7b2",
      "relationship_type": "affected-organization",
      "source_ref": "incident--4227b62c-3774-5474-836d-afa8f9f6daf3",
      "target_ref": "identity--5cd1a705-5eba-5918-8a83-b93e51a6f709",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "California Attorney General",
          "url": "https://oag.ca.gov/ecrime/databreach/reports/sb24-615004",
          "external_id": "cit:9ae173ee-8d75-5860-b53a-4d09d443e435",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:dd5e9e6e96fa0dde30589dea318ac6f73a2478ef7b715f629eefc1cc0ef15353"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--01928a52-4515-58e5-825b-892d6f21644b",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:7a450831-69ae-5c08-b73b-cfd12931de47",
      "confidence": 90,
      "external_references": [],
      "x_ally_claim_object": {
        "kind": "iri",
        "value": "https://attack.mitre.org/techniques/T1566/"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--1b2c7b0a-2f55-5ca4-8f41-1b0be9ef155f",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "clm:175cdc93-083a-577d-9293-918769998553",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "California Attorney General",
          "url": "https://oag.ca.gov/ecrime/databreach/reports/sb24-615004",
          "external_id": "cit:0bbd9261-a5b1-5546-a6cf-dd645d540bd9",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:dd5e9e6e96fa0dde30589dea318ac6f73a2478ef7b715f629eefc1cc0ef15353"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The reviewed source documents the farmers insurance security incident involving Farmers Insurance."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--560df270-dab6-5472-869f-604aedbb9f2e",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:2d3d7cc3-8b26-5c66-b009-a0a7563b539a",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "California Attorney General",
          "url": "https://oag.ca.gov/ecrime/databreach/reports/sb24-615004",
          "external_id": "cit:f6ad4323-a889-5928-ab5b-7d14675f14ec",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:bd9a8c178030ed36caaadf1dda2a237ea5ae75528b59119c1bd45ffc3bf35495"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2025-12-03"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--7f9c46b5-21e9-5414-8425-2346349441d8",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:b0b92ca9-1590-572c-a657-c76bfffc6496",
      "confidence": 90,
      "external_references": [],
      "x_ally_claim_object": {
        "kind": "iri",
        "value": "https://attack.mitre.org/techniques/T1528/"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--e10ef8fc-3084-5091-8e58-62d6476a0ca7",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:e0e34a0c-2aef-57ea-a09f-5c94c98e8eaa",
      "confidence": 82,
      "external_references": [
        {
          "source_name": "California Attorney General",
          "url": "https://oag.ca.gov/ecrime/databreach/reports/sb24-615004",
          "external_id": "cit:d6baeb25-a32a-5560-9ac0-53a920a9f55c",
          "description": "The Office of the Attorney General is unable to guarantee the accuracy of this translation and is therefore not liable for any inaccurate information resulting from the translation application tool.",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:bd9a8c178030ed36caaadf1dda2a237ea5ae75528b59119c1bd45ffc3bf35495"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Voice phishing induced personnel to authorize a malicious connected OAuth application in Salesforce."
      }
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--5e9b1b0a-530f-5e0e-84a9-889c9b26c9a2",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "evt:d0a0c5bb-9688-563d-b86c-6e522dc7175e",
      "name": "Documented public update"
    }
  ]
}