{ "type": "bundle", "id": "bundle--02c5239e-16ed-548d-80e4-ce60da01fe68", "objects": [ { "type": "identity", "spec_version": "2.1", "id": "identity--828e3baf-6459-55cc-8889-87bdc9ab24d5", "created": "2026-10-16T11:10:20.760154+00:00", "modified": "2026-10-16T11:10:20.760154+00:00", "x_ally_original_id": "org:817e9963-389e-4a0b-a1d6-49dd41a78504", "name": "City of Foster City", "identity_class": "organization" }, { "type": "incident", "spec_version": "2.1", "id": "incident--c4536d14-b350-58df-8a8b-3b5c3e918e01", "created": "2026-10-16T11:10:20.760154+00:00", "modified": "2026-10-16T11:10:20.760154+00:00", "x_ally_original_id": "brh:5f5d2091-fc98-47f9-8e48-34db344c23b2", "name": "Foster City ransomware and data incident" }, { "type": "incident", "spec_version": "2.1", "id": "incident--da2908ce-bcd5-559e-8806-a1a88c4ab7fa", "created": "2026-10-16T11:10:20.760154+00:00", "modified": "2026-10-16T11:10:20.760154+00:00", "x_ally_original_id": "inc:0fd42190-cbd0-416e-b75f-6e84f4104c90", "name": "Foster City ransomware and data incident" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6467fcef-c954-5742-8b62-124930b21c05", "created": "2026-10-16T11:10:20.760154+00:00", "modified": "2026-10-16T11:10:20.760154+00:00", "x_ally_original_id": "clm:7501c61b-466a-4e8f-8580-27537372e36e", "relationship_type": "affected-organization", "source_ref": "incident--da2908ce-bcd5-559e-8806-a1a88c4ab7fa", "target_ref": "identity--828e3baf-6459-55cc-8889-87bdc9ab24d5", "confidence": 100, "external_references": [ { "source_name": "City of Foster City", "url": "https://oag.ca.gov/system/files/ELN-28528%20Foster%20City%20-%20Adult%2012%20months%20CM.pdf", "external_id": "cit:62948191-75a2-4a8a-93cb-43fe1eb24106", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:1ad0df212e51da89cec44ca426f9e9358ed770cba8e6b48183f4a972603b13db" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6892148a-31e4-5c73-85b9-a70308cfd3b0", "created": "2026-10-16T11:10:20.760154+00:00", "modified": "2026-10-16T11:10:20.760154+00:00", "x_ally_original_id": "clm:7928b341-a6b1-40dd-8e7c-d24b272c71c8", "relationship_type": "resulted-in", "source_ref": "incident--da2908ce-bcd5-559e-8806-a1a88c4ab7fa", "target_ref": "x-ally-event--db2a1269-b775-5b75-86f5-9ef2c1214411", "confidence": 100, "external_references": [ { "source_name": "City of Foster City", "url": "https://www.fostercity.org/m/newsflash/home/detail/245", "external_id": "cit:b4613e8c-99a9-4c97-8f39-d72382d92ea2", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:46924326b67b24168a183296681f3744d9acaeb44eb59eacffbbbbe840376318" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--95f8cde0-31b9-5800-8850-0b7ceaed417a", "created": "2026-10-16T11:10:20.760154+00:00", "modified": "2026-10-16T11:10:20.760154+00:00", "x_ally_original_id": "clm:183d4edf-d948-42c7-9840-767051f1da97", "relationship_type": "resulted-in", "source_ref": "incident--da2908ce-bcd5-559e-8806-a1a88c4ab7fa", "target_ref": "x-ally-event--44a04faa-8c35-5318-8e57-d72bbee4706c", "confidence": 100, "external_references": [ { "source_name": "City of Foster City", "url": "https://oag.ca.gov/system/files/ELN-28528%20Foster%20City%20-%20Adult%2012%20months%20CM.pdf", "external_id": "cit:75198d5e-8c69-4277-a7ea-ed5eb4e63ee3", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:1ad0df212e51da89cec44ca426f9e9358ed770cba8e6b48183f4a972603b13db" } ] }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--0c497923-b17f-5a24-8447-be7c695ce9c7", "created": "2026-10-16T11:10:20.760154+00:00", "modified": "2026-10-16T11:10:20.760154+00:00", "x_ally_original_id": "clm:e7a95c22-acce-40e3-b06a-ac50dba78672", "confidence": 100, "external_references": [ { "source_name": "City of Foster City", "url": "https://oag.ca.gov/system/files/ELN-28528%20Foster%20City%20-%20Adult%2012%20months%20CM.pdf", "external_id": "cit:35b06003-6ef6-47b3-8687-0b96d973d659", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:1ad0df212e51da89cec44ca426f9e9358ed770cba8e6b48183f4a972603b13db" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "The city completed its review of potentially affected files." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--0d5f672f-8843-5452-8e5f-3eec6b6887f9", "created": "2026-10-16T11:10:20.760154+00:00", "modified": "2026-10-16T11:10:20.760154+00:00", "x_ally_original_id": "clm:1459a68c-53a0-4546-bce8-4fc285ac2c7f", "confidence": 100, "external_references": [ { "source_name": "City of Foster City", "url": "https://oag.ca.gov/system/files/ELN-28528%20Foster%20City%20-%20Adult%2012%20months%20CM.pdf", "external_id": "cit:63dc7507-0639-41da-8e03-8997ec74b817", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:1ad0df212e51da89cec44ca426f9e9358ed770cba8e6b48183f4a972603b13db" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "Its later notification says an unauthorized party accessed city systems and may have viewed or acquired files between February 28 and March 25." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--2260b3fd-d136-548f-81aa-251d59014970", "created": "2026-10-16T11:10:20.760154+00:00", "modified": "2026-10-16T11:10:20.760154+00:00", "x_ally_original_id": "clm:a6dfab6a-dfb0-4505-ad34-abdc5f9b0e46", "confidence": 100, "external_references": [ { "source_name": "City of Foster City", "url": "https://oag.ca.gov/system/files/ELN-28528%20Foster%20City%20-%20Adult%2012%20months%20CM.pdf", "external_id": "cit:1e96fb91-eb3d-423e-a146-c8a432ac0cee", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:1ad0df212e51da89cec44ca426f9e9358ed770cba8e6b48183f4a972603b13db" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "The city completed its personal-information review on August 6. Its public template identifies names but leaves the additional affected data fields blank." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--244a43e1-d94a-5d65-89fd-da5086da5e54", "created": "2026-10-16T11:10:20.760154+00:00", "modified": "2026-10-16T11:10:20.760154+00:00", "x_ally_original_id": "clm:45619812-19d7-42ef-a0c8-934470551734", "confidence": 100, "external_references": [ { "source_name": "City of Foster City", "url": "https://www.fostercity.org/m/newsflash/home/detail/245", "external_id": "cit:11771c2e-ee77-4dd4-9f74-032509a1a998", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:46924326b67b24168a183296681f3744d9acaeb44eb59eacffbbbbe840376318" } ], "x_ally_claim_object": { "kind": "value", "datatype": "date", "value": "2026-03-19" } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--68324325-1f8f-5951-8955-93259cb015c6", "created": "2026-10-16T11:10:20.760154+00:00", "modified": "2026-10-16T11:10:20.760154+00:00", "x_ally_original_id": "clm:ea8e2b96-da89-4671-8307-a67874688489", "confidence": 100, "external_references": [ { "source_name": "City of Foster City", "url": "https://www.fostercity.org/m/newsflash/home/detail/245", "external_id": "cit:97db3631-af31-4fc3-81d3-fa6b278e3b2b", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:46924326b67b24168a183296681f3744d9acaeb44eb59eacffbbbbe840376318" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "On March 19, the city reported that public services outside emergency response were temporarily paused; 911 and police dispatch remained functional." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--6a930165-7369-5aea-8f34-a5b93e0d82ef", "created": "2026-10-16T11:10:20.760154+00:00", "modified": "2026-10-16T11:10:20.760154+00:00", "x_ally_original_id": "clm:8497fa8e-104c-4075-bc09-4e036d2e8ee2", "confidence": 100, "external_references": [ { "source_name": "City of Foster City", "url": "https://www.fostercity.org/m/newsflash/home/detail/245", "external_id": "cit:3b5f5d8f-0fc1-44bf-b96e-a4d4dfd87c30", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:46924326b67b24168a183296681f3744d9acaeb44eb59eacffbbbbe840376318" } ], "x_ally_claim_object": { "kind": "value", "datatype": "date", "value": "2026-03-19" } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--aa7f70bd-e85f-5ce7-8737-6ee80edd9c85", "created": "2026-10-16T11:10:20.760154+00:00", "modified": "2026-10-16T11:10:20.760154+00:00", "x_ally_original_id": "clm:605222ad-81bf-4049-8091-d807fc3dc969", "confidence": 100, "external_references": [ { "source_name": "City of Foster City", "url": "https://www.fostercity.org/m/newsflash/home/detail/245", "external_id": "cit:16d53f79-795b-44d5-968e-737b7b3981de", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:46924326b67b24168a183296681f3744d9acaeb44eb59eacffbbbbe840376318" } ], "x_ally_claim_object": { "kind": "value", "datatype": "date", "value": "2026-03-19" } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--ae04fa56-a3ff-5a71-8612-25c39738217a", "created": "2026-10-16T11:10:20.760154+00:00", "modified": "2026-10-16T11:10:20.760154+00:00", "x_ally_original_id": "clm:2833ef0e-fb9d-4b19-9b42-e23c6137189f", "confidence": 100, "external_references": [ { "source_name": "City of Foster City", "url": "https://www.fostercity.org/m/newsflash/home/detail/245", "external_id": "cit:011ea28f-1771-4ffe-b70a-3841f5e0ba67", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:46924326b67b24168a183296681f3744d9acaeb44eb59eacffbbbbe840376318" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "The city reported ransomware and paused nonemergency services." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--c7ca8d46-42c5-5cd0-88e2-b3d14a1b110f", "created": "2026-10-16T11:10:20.760154+00:00", "modified": "2026-10-16T11:10:20.760154+00:00", "x_ally_original_id": "clm:dd7dccee-e3f2-4403-808b-35dcf2a6820b", "confidence": 100, "external_references": [ { "source_name": "City of Foster City", "url": "https://www.fostercity.org/m/newsflash/home/detail/245", "external_id": "cit:9ac8d91c-66a4-4322-bea5-ba15fb4ebb87", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:46924326b67b24168a183296681f3744d9acaeb44eb59eacffbbbbe840376318" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "The city identified ransomware but did not identify the entry method or a responsible group in the reviewed notices." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--deae97a9-0dae-5058-85fc-0ae1370aae6e", "created": "2026-10-16T11:10:20.760154+00:00", "modified": "2026-10-16T11:10:20.760154+00:00", "x_ally_original_id": "clm:b08db3d5-1722-4e43-8b39-04d919e886a2", "confidence": 100, "external_references": [ { "source_name": "City of Foster City", "url": "https://www.fostercity.org/m/newsflash/home/detail/245", "external_id": "cit:9cc2bcbb-e6f5-4f1d-87d1-02c8589790ce", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:46924326b67b24168a183296681f3744d9acaeb44eb59eacffbbbbe840376318" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "Foster City identified ransomware on its network early on March 19, 2026." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--e780e132-4bd5-58c8-869a-dd6a51a8784a", "created": "2026-10-16T11:10:20.760154+00:00", "modified": "2026-10-16T11:10:20.760154+00:00", "x_ally_original_id": "clm:6675fd27-4027-405f-97a7-23f57eb97992", "confidence": 100, "external_references": [ { "source_name": "City of Foster City", "url": "https://oag.ca.gov/system/files/ELN-28528%20Foster%20City%20-%20Adult%2012%20months%20CM.pdf", "external_id": "cit:319e16ba-97f9-4b0a-8238-6992fc508e1b", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:1ad0df212e51da89cec44ca426f9e9358ed770cba8e6b48183f4a972603b13db" } ], "x_ally_claim_object": { "kind": "value", "datatype": "date", "value": "2026-08-06" } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--f3a947cf-0104-5bc9-8c0a-3af807ad7184", "created": "2026-10-16T11:10:20.760154+00:00", "modified": "2026-10-16T11:10:20.760154+00:00", "x_ally_original_id": "clm:49e070ec-4203-444e-936a-4a57a9bbd71d", "confidence": 100, "external_references": [ { "source_name": "City of Foster City", "url": "https://oag.ca.gov/system/files/ELN-28528%20Foster%20City%20-%20Adult%2012%20months%20CM.pdf", "external_id": "cit:fe018d76-aebd-4b5e-a03c-0fb5300c9bf3", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:1ad0df212e51da89cec44ca426f9e9358ed770cba8e6b48183f4a972603b13db" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "The city secured systems, engaged an independent forensic firm and notified law enforcement. It offered one year of credit monitoring and said it had no evidence of identity theft or fraud from the potentially affected information at notice time." } }, { "type": "x-ally-event", "spec_version": "2.1", "id": "x-ally-event--44a04faa-8c35-5318-8e57-d72bbee4706c", "created": "2026-10-16T11:10:20.760154+00:00", "modified": "2026-10-16T11:10:20.760154+00:00", "x_ally_original_id": "evt:90d232a1-f934-4ec4-b5fe-443fb3bada60", "name": "Personal-information review completed" }, { "type": "x-ally-event", "spec_version": "2.1", "id": "x-ally-event--db2a1269-b775-5b75-86f5-9ef2c1214411", "created": "2026-10-16T11:10:20.760154+00:00", "modified": "2026-10-16T11:10:20.760154+00:00", "x_ally_original_id": "evt:38a5163c-1074-4a9e-8b38-b1e934c93b90", "name": "Ransomware publicly disclosed" } ] }