{
  "type": "bundle",
  "id": "bundle--3cbe571c-a388-53a5-88c8-5f95c031e74e",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--d7c08008-60f0-573c-881f-a50f46f4b7b9",
      "created": "2026-10-16T11:10:20.760154+00:00",
      "modified": "2026-10-16T11:10:20.760154+00:00",
      "x_ally_original_id": "org:51a0fa72-c527-416d-9ae2-2f1502b6387d",
      "name": "Frontline Education",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--9d8f04cf-760c-54fd-8346-7ef741406f05",
      "created": "2026-10-16T11:10:20.760154+00:00",
      "modified": "2026-10-16T11:10:20.760154+00:00",
      "x_ally_original_id": "brh:b30d0b93-d0ad-49a9-86c1-0f90beb31b83",
      "name": "Frontline Education software data incident"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--cfcd937c-5844-53bc-8510-3da5b057d8de",
      "created": "2026-10-16T11:10:20.760154+00:00",
      "modified": "2026-10-16T11:10:20.760154+00:00",
      "x_ally_original_id": "inc:0c8223a2-f22c-4f11-996c-4abf364cc873",
      "name": "Frontline Education software data incident"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--381e69cf-54bb-55e2-8ee3-200ad922e613",
      "created": "2026-10-16T11:10:20.760154+00:00",
      "modified": "2026-10-16T11:10:20.760154+00:00",
      "x_ally_original_id": "clm:84ef2f9f-e867-40f3-8c98-ef3b938ee412",
      "relationship_type": "affected-organization",
      "source_ref": "incident--cfcd937c-5844-53bc-8510-3da5b057d8de",
      "target_ref": "identity--d7c08008-60f0-573c-881f-a50f46f4b7b9",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Frontline Education",
          "url": "https://www.frontlineeducation.com/news/information-and-support-regarding-recent-cybersecurity-notifications",
          "external_id": "cit:d51f3f16-c003-4b31-832b-b939c225a94e",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:404cf94b741e94f1a4382385ec416aed952707accf6a78aac1d9719d379dabde"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--4ebe202a-50ee-5a3b-8cae-e800eee81d4b",
      "created": "2026-10-16T11:10:20.760154+00:00",
      "modified": "2026-10-16T11:10:20.760154+00:00",
      "x_ally_original_id": "clm:5e060589-798b-49af-88b4-7b72c0946e1d",
      "relationship_type": "resulted-in",
      "source_ref": "incident--cfcd937c-5844-53bc-8510-3da5b057d8de",
      "target_ref": "x-ally-event--d0946d2f-9f36-5f4a-8c59-0c93d551fcb7",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Frontline Education",
          "url": "https://oag.ca.gov/system/files/Individual_Notice_Template.pdf",
          "external_id": "cit:53314574-ed1b-46c6-99db-72ad01e2b43a",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:494d5675bb98f8d9d24cfd068c2b25051bc047afc49374cbf2a838279ceb0646"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--9c9fc952-95f6-5cf9-80ae-706b499120b2",
      "created": "2026-10-16T11:10:20.760154+00:00",
      "modified": "2026-10-16T11:10:20.760154+00:00",
      "x_ally_original_id": "clm:aae039b4-b707-4ccc-a498-60b6bcf4efcc",
      "relationship_type": "resulted-in",
      "source_ref": "incident--cfcd937c-5844-53bc-8510-3da5b057d8de",
      "target_ref": "x-ally-event--be265346-fc60-5b95-8fc4-3ae91677da6b",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Frontline Education",
          "url": "https://oag.ca.gov/system/files/Individual_Notice_Template.pdf",
          "external_id": "cit:c4357c5b-c7f3-48cb-9c0b-fcddc6ab5996",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:494d5675bb98f8d9d24cfd068c2b25051bc047afc49374cbf2a838279ceb0646"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--10b17882-c4de-5d27-8a86-3fdb57767c9d",
      "created": "2026-10-16T11:10:20.760154+00:00",
      "modified": "2026-10-16T11:10:20.760154+00:00",
      "x_ally_original_id": "clm:1addc98c-766a-4d12-995b-bea0112fe348",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Frontline Education",
          "url": "https://www.frontlineeducation.com/news/information-and-support-regarding-recent-cybersecurity-notifications",
          "external_id": "cit:04223eae-1754-478b-a3fc-774f4fa88ab9",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:404cf94b741e94f1a4382385ec416aed952707accf6a78aac1d9719d379dabde"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Frontline attributes the access to a vulnerability in an unnamed third-party software product. The sources do not identify a CVE or the software supplier."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--117ed140-f301-5553-85b2-9e6cbf543317",
      "created": "2026-10-16T11:10:20.760154+00:00",
      "modified": "2026-10-16T11:10:20.760154+00:00",
      "x_ally_original_id": "clm:97da562e-1f61-4f74-9907-5de9e0b27c83",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Frontline Education",
          "url": "https://www.frontlineeducation.com/news/information-and-support-regarding-recent-cybersecurity-notifications",
          "external_id": "cit:61e69de3-e99b-4cec-b39d-2605cce854dc",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:404cf94b741e94f1a4382385ec416aed952707accf6a78aac1d9719d379dabde"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Frontline says the affected environment contained data related to Frontline Central and School Health Management. Information involved varies by district and individual."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--328a06d4-c37f-5382-8b19-01a0acf465f2",
      "created": "2026-10-16T11:10:20.760154+00:00",
      "modified": "2026-10-16T11:10:20.760154+00:00",
      "x_ally_original_id": "clm:e5b81ee5-8ae9-4d4e-84f3-116167d0df77",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Frontline Education",
          "url": "https://oag.ca.gov/system/files/Individual_Notice_Template.pdf",
          "external_id": "cit:3d57d56c-b849-47b1-ab76-012eabf09aea",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:494d5675bb98f8d9d24cfd068c2b25051bc047afc49374cbf2a838279ceb0646"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The template dates the start of unauthorized access to this day."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--3572fa78-6f3f-599f-8b46-6e15a4445ba4",
      "created": "2026-10-16T11:10:20.760154+00:00",
      "modified": "2026-10-16T11:10:20.760154+00:00",
      "x_ally_original_id": "clm:d7eaecce-bda6-49a5-a7e2-c68c65100521",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Frontline Education",
          "url": "https://oag.ca.gov/system/files/Individual_Notice_Template.pdf",
          "external_id": "cit:4bcebe12-f0f0-4eb4-b91a-846c4d5c7dd2",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:494d5675bb98f8d9d24cfd068c2b25051bc047afc49374cbf2a838279ceb0646"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "It notified affected districts and coordinated individual notifications; the reviewed adult template offers twenty-four months of credit monitoring."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--3f603d1f-9b37-50a1-89e1-faee1ff4648a",
      "created": "2026-10-16T11:10:20.760154+00:00",
      "modified": "2026-10-16T11:10:20.760154+00:00",
      "x_ally_original_id": "clm:7f15ecac-635a-48f5-94cd-d3269c8cc74e",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Frontline Education",
          "url": "https://www.frontlineeducation.com/news/information-and-support-regarding-recent-cybersecurity-notifications",
          "external_id": "cit:0c38275b-ec01-48d2-9165-ac5177ea0543",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:404cf94b741e94f1a4382385ec416aed952707accf6a78aac1d9719d379dabde"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "As of the reviewed October 16 page, Frontline said all products were operating normally."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--410fab37-d9b7-582e-820c-c9912b6bf90e",
      "created": "2026-10-16T11:10:20.760154+00:00",
      "modified": "2026-10-16T11:10:20.760154+00:00",
      "x_ally_original_id": "clm:495cee94-5444-49ca-ad8c-f77377442e79",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Frontline Education",
          "url": "https://oag.ca.gov/system/files/Individual_Notice_Template.pdf",
          "external_id": "cit:0a1b58c6-f408-4303-a66b-553b92c67432",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:494d5675bb98f8d9d24cfd068c2b25051bc047afc49374cbf2a838279ceb0646"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Frontline identified the vulnerability and unauthorized access."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--7773c7f7-3bdc-5281-8704-b114aa4b666b",
      "created": "2026-10-16T11:10:20.760154+00:00",
      "modified": "2026-10-16T11:10:20.760154+00:00",
      "x_ally_original_id": "clm:304b486d-3441-4017-9bb4-5496a4e81449",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Frontline Education",
          "url": "https://oag.ca.gov/system/files/Individual_Notice_Template.pdf",
          "external_id": "cit:e599365f-677f-4ed3-9cf1-d8c8d8665b44",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:494d5675bb98f8d9d24cfd068c2b25051bc047afc49374cbf2a838279ceb0646"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-08-13"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--876abf8d-9ddf-5a93-868c-34ab25583563",
      "created": "2026-10-16T11:10:20.760154+00:00",
      "modified": "2026-10-16T11:10:20.760154+00:00",
      "x_ally_original_id": "clm:0773390d-d08e-4c5c-9d17-403ed43b4d43",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Frontline Education",
          "url": "https://oag.ca.gov/system/files/Individual_Notice_Template.pdf",
          "external_id": "cit:c8a7f196-9fbb-43c1-856c-306563769d3d",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:494d5675bb98f8d9d24cfd068c2b25051bc047afc49374cbf2a838279ceb0646"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-08-14"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--e74a2d6c-60f2-5f09-821a-eed19d2941e7",
      "created": "2026-10-16T11:10:20.760154+00:00",
      "modified": "2026-10-16T11:10:20.760154+00:00",
      "x_ally_original_id": "clm:a3118474-863b-455a-b2ac-bbc3e790238a",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Frontline Education",
          "url": "https://oag.ca.gov/system/files/Individual_Notice_Template.pdf",
          "external_id": "cit:34d996ba-c575-48df-98c3-9dafb4919541",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:494d5675bb98f8d9d24cfd068c2b25051bc047afc49374cbf2a838279ceb0646"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Frontline Education identified unauthorized access on August 14, 2026, after access to part of its environment began August 13. Its individual-notification template says personal information was obtained."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--ed175cfb-da01-5121-86f8-e0ebd9690b99",
      "created": "2026-10-16T11:10:20.760154+00:00",
      "modified": "2026-10-16T11:10:20.760154+00:00",
      "x_ally_original_id": "clm:1f9a536e-ba3e-4f02-915d-d4bd7c1aed7c",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Frontline Education",
          "url": "https://oag.ca.gov/system/files/Individual_Notice_Template.pdf",
          "external_id": "cit:f79f6938-aca9-4db9-b5ec-5fed21c6e398",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:494d5675bb98f8d9d24cfd068c2b25051bc047afc49374cbf2a838279ceb0646"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-08-14"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--fbf78c63-5686-52bb-8d25-8044397ec78a",
      "created": "2026-10-16T11:10:20.760154+00:00",
      "modified": "2026-10-16T11:10:20.760154+00:00",
      "x_ally_original_id": "clm:75ac10d9-dc8a-4976-a576-47e66ffe2a41",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Frontline Education",
          "url": "https://www.frontlineeducation.com/news/information-and-support-regarding-recent-cybersecurity-notifications",
          "external_id": "cit:fe67fd9a-f969-4d06-92b5-a90a34eb2363",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:404cf94b741e94f1a4382385ec416aed952707accf6a78aac1d9719d379dabde"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Frontline investigated with an independent cybersecurity firm, remediated the vulnerability, strengthened monitoring and safeguards, and engaged law enforcement."
      }
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--be265346-fc60-5b95-8fc4-3ae91677da6b",
      "created": "2026-10-16T11:10:20.760154+00:00",
      "modified": "2026-10-16T11:10:20.760154+00:00",
      "x_ally_original_id": "evt:fd8b81e9-3b8f-42ab-8493-f25909bc9e11",
      "name": "Security team identifies issue"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--d0946d2f-9f36-5f4a-8c59-0c93d551fcb7",
      "created": "2026-10-16T11:10:20.760154+00:00",
      "modified": "2026-10-16T11:10:20.760154+00:00",
      "x_ally_original_id": "evt:a03dbe8e-20c3-4a33-9158-f5e4796858e9",
      "name": "Unauthorized access begins"
    }
  ]
}