{
  "type": "bundle",
  "id": "bundle--3f8e398a-36cd-5a9e-8c20-27ffdc722bcf",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--62fbe781-f3b9-55cf-8903-bfe2d1471382",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "org:67682e98-def1-4361-bd96-4fef95e2e21f",
      "name": "Frazer LLP",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--b999e7f9-78dc-5d72-8802-703a6b9cd135",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "inc:c95fd9d1-d2d0-4174-b443-0d84d01b885b",
      "name": "Frazer LLP March 2025 network data incident"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--fd118fc2-7cc8-5882-8665-3a2793f79666",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "brh:09e7c78b-5ecf-4496-a9ad-f74656cd1768",
      "name": "Frazer LLP March 2025 network data incident"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--2c7b5bc3-6b97-59af-8695-9c4d757e9970",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:bbde4575-d6a3-4567-9c4b-8df08145cd70",
      "relationship_type": "resulted-in",
      "source_ref": "incident--b999e7f9-78dc-5d72-8802-703a6b9cd135",
      "target_ref": "x-ally-data-exposure--2019aad6-bced-5d09-8563-6148c93861ff",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Frazer LLP",
          "url": "https://oag.ca.gov/system/files/Frazer_LLP_Redacted_Sample_Proof_40313313v1.pdf",
          "external_id": "cit:25461bb1-712b-4c65-849d-560c29e34736",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:87943c6cf9c7c1ee37cd77c8be71300685f04908862d949d17dd29b5440a8888"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--38167219-2894-506d-83ab-f317280e560a",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:3ff1e799-2e94-4d57-9611-908f78a01ca5",
      "relationship_type": "resulted-in",
      "source_ref": "incident--b999e7f9-78dc-5d72-8802-703a6b9cd135",
      "target_ref": "x-ally-event--8a9431cf-a394-50f0-8599-dbfb2d5517c4",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Frazer LLP",
          "url": "https://oag.ca.gov/system/files/Frazer_LLP_Redacted_Sample_Proof_40313313v1.pdf",
          "external_id": "cit:f54a1569-b97a-441c-a702-2818f83dfcab",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:87943c6cf9c7c1ee37cd77c8be71300685f04908862d949d17dd29b5440a8888"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--42bc08d0-57ac-5221-84cd-447000cdfc0b",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:1ff20608-f753-486a-ab53-0dd9355d0b71",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--2019aad6-bced-5d09-8563-6148c93861ff",
      "target_ref": "x-ally-data-category--a2b7dd9d-0c02-5710-88ed-ea507d0ffa07",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Frazer LLP",
          "url": "https://oag.ca.gov/system/files/Frazer_LLP_Redacted_Sample_Proof_40313313v1.pdf",
          "external_id": "cit:2373baa3-28db-443b-9333-6ff0e828b234",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:87943c6cf9c7c1ee37cd77c8be71300685f04908862d949d17dd29b5440a8888"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--4fb51631-49ec-5778-840a-f90c99f5f4e7",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:4409c58f-ec57-4e3e-a2c1-63e87c340c3f",
      "relationship_type": "affected-organization",
      "source_ref": "incident--b999e7f9-78dc-5d72-8802-703a6b9cd135",
      "target_ref": "identity--62fbe781-f3b9-55cf-8903-bfe2d1471382",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Frazer LLP",
          "url": "https://oag.ca.gov/system/files/Frazer_LLP_Redacted_Sample_Proof_40313313v1.pdf",
          "external_id": "cit:a01ca0fb-8baa-4fa8-9ce4-584ae834eef7",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:87943c6cf9c7c1ee37cd77c8be71300685f04908862d949d17dd29b5440a8888"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--f08473c3-cd30-5f23-8fd9-e749601e8b6a",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:cfe450fa-1898-4f9b-bc28-adbee631fd1a",
      "relationship_type": "resulted-in",
      "source_ref": "incident--b999e7f9-78dc-5d72-8802-703a6b9cd135",
      "target_ref": "x-ally-event--d55a5086-a0cf-5e48-8b53-cf1c80c5b5b1",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "California Department of Justice, Office of the Attorney General",
          "url": "https://oag.ca.gov/privacy/databreach/list",
          "external_id": "cit:fabc7e83-445d-48cb-93c4-ea65c8de88fe",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:0b0ab97c0c07b9151e40589e3361589e9a57e4c2e34ea115a4acfc3b354237ae"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--699b1541-4a38-5adc-870e-15dfbd947fbe",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:ca3cf0d1-1022-454b-9b4c-d4e7935f3be9",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Frazer LLP",
          "url": "https://oag.ca.gov/system/files/Frazer_LLP_Redacted_Sample_Proof_40313313v1.pdf",
          "external_id": "cit:2e1db063-5fe9-4ed6-9a0b-d877633d1caa",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:87943c6cf9c7c1ee37cd77c8be71300685f04908862d949d17dd29b5440a8888"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Frazer offered IDX identity-protection services and said it had no evidence of related financial fraud or identity theft."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--6fdff229-2c71-51a0-86f9-567d670f9384",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:68a7c87f-786a-45ff-90f0-caf98404e064",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Frazer LLP",
          "url": "https://oag.ca.gov/system/files/Frazer_LLP_Redacted_Sample_Proof_40313313v1.pdf",
          "external_id": "cit:5131cc59-1d28-42a8-ba3e-0c912f8f0a00",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:87943c6cf9c7c1ee37cd77c8be71300685f04908862d949d17dd29b5440a8888"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Frazer experienced a cybersecurity incident affecting network connectivity on or about March 25, 2025."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--88bae2de-8a4b-5aaf-810e-fd3b69098f5d",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:0ce1f2e4-7f15-49f1-8a06-bee02e3acebb",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Frazer LLP",
          "url": "https://oag.ca.gov/system/files/Frazer_LLP_Redacted_Sample_Proof_40313313v1.pdf",
          "external_id": "cit:4989e632-74f8-4fbd-88a3-8065245f6925",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:87943c6cf9c7c1ee37cd77c8be71300685f04908862d949d17dd29b5440a8888"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-09-18"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--99f26627-b2e7-59c7-8c37-8860d122ffc0",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:07250bcd-7724-4a2e-b63b-c8613e7aa71e",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "California Department of Justice, Office of the Attorney General",
          "url": "https://oag.ca.gov/privacy/databreach/list",
          "external_id": "cit:f3d5b585-cd80-4c04-b50b-311a703b52fb",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:0b0ab97c0c07b9151e40589e3361589e9a57e4c2e34ea115a4acfc3b354237ae"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-16"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--a7b70fe8-7942-5f5c-8c5d-23961bb90907",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:2b7cfd3b-c832-46e7-9a1e-064d89bd4c7e",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Frazer LLP",
          "url": "https://oag.ca.gov/system/files/Frazer_LLP_Redacted_Sample_Proof_40313313v1.pdf",
          "external_id": "cit:a1f6ad0a-1c08-4cf6-be5f-e987688bf401",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:87943c6cf9c7c1ee37cd77c8be71300685f04908862d949d17dd29b5440a8888"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "On September 18, 2026, Frazer determined that personal data may have been acquired without authorization, likely between March 24 and 25, 2025."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--c6c67b2e-6504-5f5e-8b20-5d7b74333b31",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:897711c6-9101-4697-9466-1ea15fcb109f",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Frazer LLP",
          "url": "https://oag.ca.gov/system/files/Frazer_LLP_Redacted_Sample_Proof_40313313v1.pdf",
          "external_id": "cit:b2dbd631-bdb0-470b-8078-52d7aadcda78",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:87943c6cf9c7c1ee37cd77c8be71300685f04908862d949d17dd29b5440a8888"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Frazer investigated with external cybersecurity professionals and conducted a document review."
      }
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--a2b7dd9d-0c02-5710-88ed-ea507d0ffa07",
      "created": "2026-08-08T23:12:00Z",
      "modified": "2026-08-08T23:12:00Z",
      "x_ally_original_id": "dat:559cf3f5-80c7-45ba-a930-ff0bfa8d17b0",
      "name": "Names"
    },
    {
      "type": "x-ally-data-exposure",
      "spec_version": "2.1",
      "id": "x-ally-data-exposure--2019aad6-bced-5d09-8563-6148c93861ff",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "exp:cc9dd0ae-7131-457e-95b2-72d1325e9cee",
      "name": "Personal information described in the notification"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--8a9431cf-a394-50f0-8599-dbfb2d5517c4",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "evt:576e50dd-d84e-4856-8e60-324ed7dbdc4e",
      "name": "Possible personal-data acquisition determined"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--d55a5086-a0cf-5e48-8b53-cf1c80c5b5b1",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "evt:8c620cf0-392f-4b53-a7fe-fef355c03cba",
      "name": "California report recorded"
    }
  ]
}