{
  "type": "bundle",
  "id": "bundle--7e1a7752-3254-5df9-8f1f-0cfcce6c2b4f",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--8963c160-a043-55e5-8288-1211eb0593bb",
      "created": "2026-10-30T14:22:20.444045+00:00",
      "modified": "2026-10-30T14:22:20.444045+00:00",
      "x_ally_original_id": "org:98aa0b71-d2d6-47cf-974b-398084d35b71",
      "name": "Hitec Group USA, Inc.",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--01e5bdc9-4a4c-51f9-83ec-eaf084a37c6b",
      "created": "2026-10-30T14:22:20.444045+00:00",
      "modified": "2026-10-30T14:22:20.444045+00:00",
      "x_ally_original_id": "brh:3210a0fc-8b21-4e0f-a5da-bd564526d592",
      "name": "Hitec online-store credential incident"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--a5e012d9-808e-5251-802e-c4ffdca53684",
      "created": "2026-10-30T14:22:20.444045+00:00",
      "modified": "2026-10-30T14:22:20.444045+00:00",
      "x_ally_original_id": "inc:c4fdd4bb-5420-43e8-b342-6453085fc69c",
      "name": "Hitec online-store credential incident"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--32abc15f-3f89-53d0-82f7-8dc0ed05721a",
      "created": "2026-10-30T14:22:20.444045+00:00",
      "modified": "2026-10-30T14:22:20.444045+00:00",
      "x_ally_original_id": "clm:78893cdb-30e0-46ce-b697-a422f14524e7",
      "relationship_type": "affected-organization",
      "source_ref": "incident--a5e012d9-808e-5251-802e-c4ffdca53684",
      "target_ref": "identity--8963c160-a043-55e5-8288-1211eb0593bb",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Hitec Group USA, Inc.",
          "url": "https://oag.ca.gov/system/files/Notice%20of%20Data%20Breach%20v1-L01.pdf",
          "external_id": "cit:541d2762-4b7e-440e-8aa2-38884c70a31d",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:2ec470a9d9b68ae2f16433d58a7665ac018a405ad6e07b6c26d2aa7bdecfc781"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--a7640613-fc22-59f2-8825-2461b6f4ac9e",
      "created": "2026-10-30T14:22:20.444045+00:00",
      "modified": "2026-10-30T14:22:20.444045+00:00",
      "x_ally_original_id": "clm:c6025074-adcf-4189-8e06-5e0b1c045569",
      "relationship_type": "resulted-in",
      "source_ref": "incident--a5e012d9-808e-5251-802e-c4ffdca53684",
      "target_ref": "x-ally-event--97b24121-8fcb-5ef6-877c-adaae62dc6c8",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Hitec Group USA, Inc.",
          "url": "https://oag.ca.gov/system/files/Notice%20of%20Data%20Breach%20v1-L01.pdf",
          "external_id": "cit:18bb5d36-36f2-4921-b69c-6dac043bb1d8",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:2ec470a9d9b68ae2f16433d58a7665ac018a405ad6e07b6c26d2aa7bdecfc781"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--cc86cac2-aff2-5681-81ca-4842b7a7039c",
      "created": "2026-10-30T14:22:20.444045+00:00",
      "modified": "2026-10-30T14:22:20.444045+00:00",
      "x_ally_original_id": "clm:dcfec046-7d4a-45c0-99d5-cc372f59211e",
      "relationship_type": "resulted-in",
      "source_ref": "incident--a5e012d9-808e-5251-802e-c4ffdca53684",
      "target_ref": "x-ally-event--9410d18a-de0e-5bbb-8ffb-d543708d3c22",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Hitec Group USA, Inc.",
          "url": "https://oag.ca.gov/system/files/Notice%20of%20Data%20Breach%20v1-L01.pdf",
          "external_id": "cit:04b0a6df-e82e-4edb-aa12-da7ed4a4312d",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:2ec470a9d9b68ae2f16433d58a7665ac018a405ad6e07b6c26d2aa7bdecfc781"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--3bcc5306-b7c8-5fb8-835d-49e461def4cf",
      "created": "2026-10-30T14:22:20.444045+00:00",
      "modified": "2026-10-30T14:22:20.444045+00:00",
      "x_ally_original_id": "clm:c1e63637-54cb-434e-9f84-689741894f27",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Hitec Group USA, Inc.",
          "url": "https://oag.ca.gov/system/files/Notice%20of%20Data%20Breach%20v1-L01.pdf",
          "external_id": "cit:764931b4-21f6-41a0-bda6-c9f5ecd08915",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:2ec470a9d9b68ae2f16433d58a7665ac018a405ad6e07b6c26d2aa7bdecfc781"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Hitec says names, email addresses, shipping and billing addresses, phone numbers and order histories were accessed. The notice does not quantify affected customers or identify payment-card exposure."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--4380355b-785b-5c7f-83a9-d6ee8219520f",
      "created": "2026-10-30T14:22:20.444045+00:00",
      "modified": "2026-10-30T14:22:20.444045+00:00",
      "x_ally_original_id": "clm:51ad2835-4436-41ae-9746-732bb9bad869",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Hitec Group USA, Inc.",
          "url": "https://oag.ca.gov/system/files/Notice%20of%20Data%20Breach%20v1-L01.pdf",
          "external_id": "cit:47986392-b7c2-4069-9860-5fae42ee7ebc",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:2ec470a9d9b68ae2f16433d58a7665ac018a405ad6e07b6c26d2aa7bdecfc781"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Compromised credentials belonging to a third-party application enabled access. The application and the method used to obtain its credentials are not identified."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--4da3dcca-dce8-5331-8b3c-d081bf545f4e",
      "created": "2026-10-30T14:22:20.444045+00:00",
      "modified": "2026-10-30T14:22:20.444045+00:00",
      "x_ally_original_id": "clm:3ac5b674-8b1f-46fe-bff6-9920befb40ec",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Hitec Group USA, Inc.",
          "url": "https://oag.ca.gov/system/files/Notice%20of%20Data%20Breach%20v1-L01.pdf",
          "external_id": "cit:b3ff3be5-949c-49e0-9008-01b9e6414c1a",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:2ec470a9d9b68ae2f16433d58a7665ac018a405ad6e07b6c26d2aa7bdecfc781"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Hitec and its vendor investigated and terminated access. The affected application was disabled, and harmful code and unauthorized website content were removed."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--637a5e25-10f7-5225-8f38-132372ac9756",
      "created": "2026-10-30T14:22:20.444045+00:00",
      "modified": "2026-10-30T14:22:20.444045+00:00",
      "x_ally_original_id": "clm:96b2cd18-244d-4503-8519-440fb8f54c9a",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Hitec Group USA, Inc.",
          "url": "https://oag.ca.gov/system/files/Notice%20of%20Data%20Breach%20v1-L01.pdf",
          "external_id": "cit:a838306e-0802-4015-b29a-1e07bc658c3b",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:2ec470a9d9b68ae2f16433d58a7665ac018a405ad6e07b6c26d2aa7bdecfc781"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Hitec discovered on September 19, 2026 that an unauthorized person had accessed online-store data through a third-party application. Its notice places the apparent activity between September 13 and 17."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--8a12a312-b477-5de2-84c1-8c66259ff53a",
      "created": "2026-10-30T14:22:20.444045+00:00",
      "modified": "2026-10-30T14:22:20.444045+00:00",
      "x_ally_original_id": "clm:77542e8a-21ec-4835-83ec-9e2ce7c5e147",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Hitec Group USA, Inc.",
          "url": "https://oag.ca.gov/system/files/Notice%20of%20Data%20Breach%20v1-L01.pdf",
          "external_id": "cit:71467620-67e8-4a13-a30d-a8b75c95e920",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:2ec470a9d9b68ae2f16433d58a7665ac018a405ad6e07b6c26d2aa7bdecfc781"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-09-19"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--c757c251-c07a-5f72-895a-41b8f48e6a02",
      "created": "2026-10-30T14:22:20.444045+00:00",
      "modified": "2026-10-30T14:22:20.444045+00:00",
      "x_ally_original_id": "clm:1cabd894-4f0d-4e24-96db-2c88e5aefa67",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Hitec Group USA, Inc.",
          "url": "https://oag.ca.gov/system/files/Notice%20of%20Data%20Breach%20v1-L01.pdf",
          "external_id": "cit:34e146e6-06a5-484e-91b8-2e888eb665f8",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:2ec470a9d9b68ae2f16433d58a7665ac018a405ad6e07b6c26d2aa7bdecfc781"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-09-13"
      }
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--9410d18a-de0e-5bbb-8ffb-d543708d3c22",
      "created": "2026-10-30T14:22:20.444045+00:00",
      "modified": "2026-10-30T14:22:20.444045+00:00",
      "x_ally_original_id": "evt:99a56112-02d2-4285-bdeb-7877ec4c0dba",
      "name": "Reported access window begins"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--97b24121-8fcb-5ef6-877c-adaae62dc6c8",
      "created": "2026-10-30T14:22:20.444045+00:00",
      "modified": "2026-10-30T14:22:20.444045+00:00",
      "x_ally_original_id": "evt:3f7f1776-de10-4773-a7d2-8fff0427b185",
      "name": "Unauthorized access discovered"
    }
  ]
}