{
  "type": "bundle",
  "id": "bundle--c86f00b0-bd0a-5659-842f-b796b8da4569",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--447e7281-2dcb-5c2d-8655-d64b73403ea6",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "org:98697517-fde2-5bcd-b7dc-e5994086fb47",
      "name": "HCA Healthcare",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--868267bb-0b0d-5afd-8979-327f12662482",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "inc:f2c86a50-fd6f-56c5-bdff-87bab35d1fc4",
      "name": "HCA Healthcare security incident"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--b0427555-1692-5303-8c12-4ae9b39a05c9",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "brh:d56acd9b-a023-5b07-a6c7-b4d161939d29",
      "name": "HCA Healthcare security incident"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--db27eeaa-8e18-5fb3-8d6d-3c0aa4b8a291",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "clm:0a47d7e6-7221-5423-bb0a-dbb6c557eeb2",
      "relationship_type": "affected-organization",
      "source_ref": "incident--868267bb-0b0d-5afd-8979-327f12662482",
      "target_ref": "identity--447e7281-2dcb-5c2d-8655-d64b73403ea6",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "U.S. Securities and Exchange Commission",
          "url": "https://www.sec.gov/Archives/edgar/data/860730/000119312523184269/d522417d8k.htm",
          "external_id": "cit:90e0174f-05f5-5c46-97f3-cb4bedcc7d5d",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5c262674b3a44901630bc6e56f71ab019406865a64e2e6fa351ae1c3bf72c461"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--1b417292-9fac-5546-89d3-b1ea9a8416f2",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "clm:00b3f762-a15f-53ed-a648-2e1d07ff03d0",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "U.S. Securities and Exchange Commission",
          "url": "https://www.sec.gov/Archives/edgar/data/860730/000119312523184269/d522417d8k.htm",
          "external_id": "cit:4f7ce304-b0d2-5bce-a6b8-e4f2fe8cbb2b",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5c262674b3a44901630bc6e56f71ab019406865a64e2e6fa351ae1c3bf72c461"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The reviewed source documents the hca healthcare security incident involving HCA Healthcare."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--7eac0eeb-975e-50a2-8811-45b8e4959a60",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:86d74fc5-5e9c-591d-b9ec-5677f2574ae0",
      "confidence": 90,
      "external_references": [],
      "x_ally_claim_object": {
        "kind": "iri",
        "value": "https://attack.mitre.org/techniques/T1486/"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--ea8f2c59-753f-52dc-8242-39a6305e32f0",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:0884551f-c953-5abb-9c44-0d63e0cbc938",
      "confidence": 83,
      "external_references": [
        {
          "source_name": "U.S. Securities and Exchange Commission",
          "url": "https://www.sec.gov/Archives/edgar/data/860730/000119312523184269/d522417d8k.htm",
          "external_id": "cit:2c9610bd-da45-585d-98d1-03401c5a0d30",
          "description": "On July 10, 2023, HCA Healthcare, Inc. issued a press release (the “Press Release”) reporting a data security incident.",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5c262674b3a44901630bc6e56f71ab019406865a64e2e6fa351ae1c3bf72c461"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Data theft from external storage location (not ransomware)."
      }
    }
  ]
}