{
  "type": "bundle",
  "id": "bundle--3c6506ed-d06b-501e-8a43-713c8050f6f8",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--447e7281-2dcb-5c2d-8655-d64b73403ea6",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "org:98697517-fde2-5bcd-b7dc-e5994086fb47",
      "name": "HCA Healthcare",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--19e8b288-6c4e-5e49-88ac-efaba590dc9f",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "inc:594463c2-fa65-4fd0-8f6d-4fb5ada826b2",
      "name": "HCA Healthcare medical-resident data incident"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--8b25cfa0-427c-5a71-828d-994b443ad15b",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "brh:3a2bd249-e471-44e3-8659-faafcb18d3e2",
      "name": "HCA Healthcare medical-resident data incident"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--0abdfc0c-0ef7-5e5b-8f97-4f88d8b3599a",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:34ff7c44-158f-453b-a7c6-8f4ebce245cc",
      "relationship_type": "resulted-in",
      "source_ref": "incident--19e8b288-6c4e-5e49-88ac-efaba590dc9f",
      "target_ref": "x-ally-event--beca72ff-33b9-503d-8b19-31e6a4f62ea1",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "HCA Healthcare",
          "url": "https://oag.ca.gov/system/files/HCA%20Healthcare%20-%20Notice%20of%20Data%20Breach%20-%20Individual%20Notification%20Templates.pdf",
          "external_id": "cit:11797500-d594-4184-aef4-cc5b22914831",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:ca6d46aaafb45274ccf8ceb3a5319b327156d934cb546011fc34a72faddf12ea"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--401b2126-189d-5daa-8b11-7ed40f879410",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:5cf7a92d-0f29-48f7-9517-ad346add1aa9",
      "relationship_type": "resulted-in",
      "source_ref": "incident--19e8b288-6c4e-5e49-88ac-efaba590dc9f",
      "target_ref": "x-ally-event--21dd51df-418e-541d-8f06-e8ea0708bc7f",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "HCA Healthcare",
          "url": "https://oag.ca.gov/system/files/HCA%20Healthcare%20-%20Notice%20of%20Data%20Breach%20-%20Individual%20Notification%20Templates.pdf",
          "external_id": "cit:9f3a8bc3-9228-44ef-8c7f-cf2e77e847ac",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:ca6d46aaafb45274ccf8ceb3a5319b327156d934cb546011fc34a72faddf12ea"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--874e597d-1133-51c5-8721-e3f801eb3012",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:3a5e654d-8e80-4420-889c-4ab98209d950",
      "relationship_type": "affected-organization",
      "source_ref": "incident--19e8b288-6c4e-5e49-88ac-efaba590dc9f",
      "target_ref": "identity--447e7281-2dcb-5c2d-8655-d64b73403ea6",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "HCA Healthcare",
          "url": "https://oag.ca.gov/system/files/HCA%20Healthcare%20-%20Notice%20of%20Data%20Breach%20-%20Individual%20Notification%20Templates.pdf",
          "external_id": "cit:974026ff-3b1b-4c6c-8466-9c126cffbe8c",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:ca6d46aaafb45274ccf8ceb3a5319b327156d934cb546011fc34a72faddf12ea"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--0ef64399-df5a-5bac-80d5-a14c02431af0",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:6065f9a0-840c-461e-b32d-e3777c30d667",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "HCA Healthcare",
          "url": "https://oag.ca.gov/system/files/HCA%20Healthcare%20-%20Notice%20of%20Data%20Breach%20-%20Individual%20Notification%20Templates.pdf",
          "external_id": "cit:3b8a281f-5bde-482f-ba33-9977fb30310f",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:ca6d46aaafb45274ccf8ceb3a5319b327156d934cb546011fc34a72faddf12ea"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "HCA Healthcare detected suspicious activity on August 12, 2026, and determined that an unauthorized party copied files containing medical-resident information that day."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--395f9b2e-fa66-5810-8f93-ce656098b433",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:897a0bc5-0b56-4512-9e71-cb7961238890",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "HCA Healthcare",
          "url": "https://oag.ca.gov/system/files/HCA%20Healthcare%20-%20Notice%20of%20Data%20Breach%20-%20Individual%20Notification%20Templates.pdf",
          "external_id": "cit:02c8674a-ec14-44bc-89de-d66cc6bf8b1b",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:ca6d46aaafb45274ccf8ceb3a5319b327156d934cb546011fc34a72faddf12ea"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-11-02"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--3b08708f-ad9b-59ab-8d7b-405ffa94d70d",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:37b6946f-ba34-4a32-98a3-c2622d38ddae",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "HCA Healthcare",
          "url": "https://oag.ca.gov/system/files/HCA%20Healthcare%20-%20Notice%20of%20Data%20Breach%20-%20Individual%20Notification%20Templates.pdf",
          "external_id": "cit:47e0e4d4-1abb-4aac-a937-2f4053133718",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:ca6d46aaafb45274ccf8ceb3a5319b327156d934cb546011fc34a72faddf12ea"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "HCA secured systems, engaged cybersecurity specialists, notified law enforcement and offered two years of identity protection."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--7c77d45e-5e29-5b89-8e5a-1199c4a1f3dc",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:3a1ae2d7-5cf7-473c-bf56-9e931b9bd5b7",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "HCA Healthcare",
          "url": "https://oag.ca.gov/system/files/HCA%20Healthcare%20-%20Notice%20of%20Data%20Breach%20-%20Individual%20Notification%20Templates.pdf",
          "external_id": "cit:c0dfd2e0-d012-44c1-8570-2cafec422c2f",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:ca6d46aaafb45274ccf8ceb3a5319b327156d934cb546011fc34a72faddf12ea"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The files contained names, Social Security numbers, birth dates, personal contacts and immigration information where applicable."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--903d345c-4ede-51e0-843d-8bc8f24681d7",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:089c1c5f-6191-46e6-b954-54457ffc6215",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "HCA Healthcare",
          "url": "https://oag.ca.gov/system/files/HCA%20Healthcare%20-%20Notice%20of%20Data%20Breach%20-%20Individual%20Notification%20Templates.pdf",
          "external_id": "cit:7d5b4059-bc12-4eac-b347-f74e4a0c804d",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:ca6d46aaafb45274ccf8ceb3a5319b327156d934cb546011fc34a72faddf12ea"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-08-12"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--965c0c7b-6fa5-5927-8c5a-de46708ac216",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:7c799c8c-e42f-497a-998e-e74c83ec929b",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "HCA Healthcare",
          "url": "https://oag.ca.gov/system/files/HCA%20Healthcare%20-%20Notice%20of%20Data%20Breach%20-%20Individual%20Notification%20Templates.pdf",
          "external_id": "cit:4904d642-5543-4fcd-b38e-d7c1c7c6d79a",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:ca6d46aaafb45274ccf8ceb3a5319b327156d934cb546011fc34a72faddf12ea"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "HCA reported no indication of publication, further disclosure, unauthorized transactions or identity theft at the time of its notice."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--d95f8a3a-bab2-56d1-8e79-877b39280fb5",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "clm:9576f169-6373-4f2a-9338-0d9e7cd61e38",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "HCA Healthcare",
          "url": "https://oag.ca.gov/system/files/HCA%20Healthcare%20-%20Notice%20of%20Data%20Breach%20-%20Individual%20Notification%20Templates.pdf",
          "external_id": "cit:285581d9-08d3-4169-a686-2688ca5c5178",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:ca6d46aaafb45274ccf8ceb3a5319b327156d934cb546011fc34a72faddf12ea"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-08-12"
      }
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--21dd51df-418e-541d-8f06-e8ea0708bc7f",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "evt:e07e74de-dab6-4da9-b44a-a50e0b678b51",
      "name": "Resident notification letter dated"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--beca72ff-33b9-503d-8b19-31e6a4f62ea1",
      "created": "2026-11-04T14:19:50.607971+00:00",
      "modified": "2026-11-04T14:19:50.607971+00:00",
      "x_ally_original_id": "evt:b0bcaa85-ac9e-494e-ba77-d38f19b177ef",
      "name": "Intrusion and file copying identified"
    }
  ]
}