{
  "type": "bundle",
  "id": "bundle--895f9a0d-ed90-5475-8b50-dd651c98317e",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--d5cf0584-2fbf-53f0-8809-078b755b6389",
      "created": "2026-10-23T14:20:19.933848+00:00",
      "modified": "2026-10-23T14:20:19.933848+00:00",
      "x_ally_original_id": "org:dc2fe097-4ddd-468e-b184-e6d10de539d6",
      "name": "Deposition Solutions, LLC",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--202b4dad-1dec-5bf4-801d-493384d41181",
      "created": "2026-10-23T14:20:19.933848+00:00",
      "modified": "2026-10-23T14:20:19.933848+00:00",
      "x_ally_original_id": "inc:ca11407b-241a-4c2a-b039-d8634b5402c7",
      "name": "Lexitas OnDemand document exposure"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--87108ea6-50d4-5f00-8d6d-bf6832c4a842",
      "created": "2026-10-23T14:20:19.933848+00:00",
      "modified": "2026-10-23T14:20:19.933848+00:00",
      "x_ally_original_id": "brh:cc3b1315-ec3f-4246-af6c-e3639165574e",
      "name": "Lexitas OnDemand document exposure"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--536dcafe-2466-5d3b-8211-98a1484f8d1c",
      "created": "2026-10-23T14:20:19.933848+00:00",
      "modified": "2026-10-23T14:20:19.933848+00:00",
      "x_ally_original_id": "clm:d41921fb-2663-4a1f-a250-caf7df48ac54",
      "relationship_type": "resulted-in",
      "source_ref": "incident--202b4dad-1dec-5bf4-801d-493384d41181",
      "target_ref": "x-ally-event--c9284673-a53c-5cc5-8b8b-1a0e56578669",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Lexitas",
          "url": "https://oag.ca.gov/system/files/Deposition%20Solutions%20LLC%20-%20Breach%20Notification%20Letter%20%28Adult%29%20-%20Final%20Proof.pdf",
          "external_id": "cit:40f152b1-9664-4125-b2c5-a570f59ce2b9",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:1e9098dce6c839a1716c73bad359adbe74502c77a924d9c0ec8ea27d999f1813"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--a51adc34-a046-5774-87f3-e2c39b2d5ce3",
      "created": "2026-10-23T14:20:19.933848+00:00",
      "modified": "2026-10-23T14:20:19.933848+00:00",
      "x_ally_original_id": "clm:51e64046-b09a-4be7-bf1f-2db8db3a13a9",
      "relationship_type": "resulted-in",
      "source_ref": "incident--202b4dad-1dec-5bf4-801d-493384d41181",
      "target_ref": "x-ally-event--b7cd8c5b-c0b8-5625-8c77-f6376098a26d",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Lexitas",
          "url": "https://oag.ca.gov/system/files/Deposition%20Solutions%20LLC%20-%20Breach%20Notification%20Letter%20%28Adult%29%20-%20Final%20Proof.pdf",
          "external_id": "cit:5215d8d6-a304-44ed-a492-68f9e61df539",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:1e9098dce6c839a1716c73bad359adbe74502c77a924d9c0ec8ea27d999f1813"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--f6473a96-4981-5a15-8b1f-3bfce9667e38",
      "created": "2026-10-23T14:20:19.933848+00:00",
      "modified": "2026-10-23T14:20:19.933848+00:00",
      "x_ally_original_id": "clm:8e8af31b-1277-4f0b-97ee-582ae868bf00",
      "relationship_type": "affected-organization",
      "source_ref": "incident--202b4dad-1dec-5bf4-801d-493384d41181",
      "target_ref": "identity--d5cf0584-2fbf-53f0-8809-078b755b6389",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Lexitas",
          "url": "https://oag.ca.gov/system/files/Deposition%20Solutions%20LLC%20-%20Breach%20Notification%20Letter%20%28Adult%29%20-%20Final%20Proof.pdf",
          "external_id": "cit:5bf5d129-6eca-4281-8b8c-33eaf04f8ee1",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:1e9098dce6c839a1716c73bad359adbe74502c77a924d9c0ec8ea27d999f1813"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--17cfde85-a989-5c1e-8e66-e8e71e3b1114",
      "created": "2026-10-23T14:20:19.933848+00:00",
      "modified": "2026-10-23T14:20:19.933848+00:00",
      "x_ally_original_id": "clm:6ccda188-9c66-4e96-b81c-7947d3f7041e",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Lexitas",
          "url": "https://oag.ca.gov/system/files/Deposition%20Solutions%20LLC%20-%20Breach%20Notification%20Letter%20%28Adult%29%20-%20Final%20Proof.pdf",
          "external_id": "cit:fa6e53f3-1c7b-4589-b40d-37347b96126c",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:1e9098dce6c839a1716c73bad359adbe74502c77a924d9c0ec8ea27d999f1813"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-05-29"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--23687d58-d201-59f9-8bf8-b9d2a6c5fb99",
      "created": "2026-10-23T14:20:19.933848+00:00",
      "modified": "2026-10-23T14:20:19.933848+00:00",
      "x_ally_original_id": "clm:a6aedb1d-ecbf-4f74-89c4-1d9386697b25",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Lexitas",
          "url": "https://oag.ca.gov/system/files/Deposition%20Solutions%20LLC%20-%20Breach%20Notification%20Letter%20%28Adult%29%20-%20Final%20Proof.pdf",
          "external_id": "cit:c737484d-2e29-447c-a7e9-e983bce43c84",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:1e9098dce6c839a1716c73bad359adbe74502c77a924d9c0ec8ea27d999f1813"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-14"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--3878c738-324c-5fd4-8938-a73ab2792163",
      "created": "2026-10-23T14:20:19.933848+00:00",
      "modified": "2026-10-23T14:20:19.933848+00:00",
      "x_ally_original_id": "clm:c3a62c28-fdd6-4d88-965f-c80a1aef6bc8",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Lexitas",
          "url": "https://oag.ca.gov/system/files/Deposition%20Solutions%20LLC%20-%20Breach%20Notification%20Letter%20%28Adult%29%20-%20Final%20Proof.pdf",
          "external_id": "cit:e9d31656-302a-43c8-a922-6fb752c2ac54",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:1e9098dce6c839a1716c73bad359adbe74502c77a924d9c0ec8ea27d999f1813"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Lexitas reported no evidence of malware or continuing attacker presence and no known fraud or misuse; it offered credit monitoring and fraud assistance."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--3c9817b5-ca8f-5aec-87cf-43e5377e42bd",
      "created": "2026-10-23T14:20:19.933848+00:00",
      "modified": "2026-10-23T14:20:19.933848+00:00",
      "x_ally_original_id": "clm:cd7a5d6c-7873-4fd9-ac8e-47e6cd9e8741",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Lexitas",
          "url": "https://oag.ca.gov/system/files/Deposition%20Solutions%20LLC%20-%20Breach%20Notification%20Letter%20%28Adult%29%20-%20Final%20Proof.pdf",
          "external_id": "cit:51e928ed-45c6-47b1-bee2-dffa14465cb0",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:1e9098dce6c839a1716c73bad359adbe74502c77a924d9c0ec8ea27d999f1813"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Lexitas restricted public access within hours of customer notification on May 29, 2026, engaged forensic specialists and added tested security enhancements."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--4f9eb57c-eb1c-5787-8b8e-d48aeadb50f6",
      "created": "2026-10-23T14:20:19.933848+00:00",
      "modified": "2026-10-23T14:20:19.933848+00:00",
      "x_ally_original_id": "clm:b937021d-91b7-4c6b-8d34-e3ac069998fe",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Lexitas",
          "url": "https://oag.ca.gov/system/files/Deposition%20Solutions%20LLC%20-%20Breach%20Notification%20Letter%20%28Adult%29%20-%20Final%20Proof.pdf",
          "external_id": "cit:0cb289a0-a95e-4c45-a0c9-a99bd65a924a",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:1e9098dce6c839a1716c73bad359adbe74502c77a924d9c0ec8ea27d999f1813"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Files primarily comprised deposition transcripts, exhibits and other legal documents; limited server logs prevented determining whether particular information was viewed, copied or downloaded."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--a20c8a4c-4f29-5378-8ae6-31d228140006",
      "created": "2026-10-23T14:20:19.933848+00:00",
      "modified": "2026-10-23T14:20:19.933848+00:00",
      "x_ally_original_id": "clm:29bc06fd-b7e6-4835-89e2-822bd13222ae",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Lexitas",
          "url": "https://oag.ca.gov/system/files/Deposition%20Solutions%20LLC%20-%20Breach%20Notification%20Letter%20%28Adult%29%20-%20Final%20Proof.pdf",
          "external_id": "cit:ff7f1ff9-a116-4c4d-aad6-029355bf87ee",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:1e9098dce6c839a1716c73bad359adbe74502c77a924d9c0ec8ea27d999f1813"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-05-29"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--b131c86d-45fe-5b62-8775-0b0c6d87a561",
      "created": "2026-10-23T14:20:19.933848+00:00",
      "modified": "2026-10-23T14:20:19.933848+00:00",
      "x_ally_original_id": "clm:a7561fcd-9195-465a-ae3e-7dd1b7fbbec4",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Lexitas",
          "url": "https://oag.ca.gov/system/files/Deposition%20Solutions%20LLC%20-%20Breach%20Notification%20Letter%20%28Adult%29%20-%20Final%20Proof.pdf",
          "external_id": "cit:2a1da42f-7ef5-435a-9fd3-393a8fdbb546",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:1e9098dce6c839a1716c73bad359adbe74502c77a924d9c0ec8ea27d999f1813"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Lexitas said a web-server configuration error made OnDemand (DepositionNet) files accessible over the internet without authentication from around September 2019."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--c1b692c6-9602-5b29-8c99-a9ae8d39bee5",
      "created": "2026-10-23T14:20:19.933848+00:00",
      "modified": "2026-10-23T14:20:19.933848+00:00",
      "x_ally_original_id": "clm:409b91b8-ccfb-4b4c-80cd-cfd215030bed",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Lexitas",
          "url": "https://oag.ca.gov/system/files/Deposition%20Solutions%20LLC%20-%20Breach%20Notification%20Letter%20%28Adult%29%20-%20Final%20Proof.pdf",
          "external_id": "cit:46cead9b-94f2-4fb5-818a-3c981de1531e",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:1e9098dce6c839a1716c73bad359adbe74502c77a924d9c0ec8ea27d999f1813"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Potential personal data included names with Social Security or driver’s-license numbers, financial-account information, dates of birth, medical information or health-insurance information."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--e17ea85e-73ef-5bc3-870e-9d1e39f376cd",
      "created": "2026-10-23T14:20:19.933848+00:00",
      "modified": "2026-10-23T14:20:19.933848+00:00",
      "x_ally_original_id": "clm:f8e2ea49-e2d7-423d-840f-39b0a1403276",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Lexitas",
          "url": "https://oag.ca.gov/system/files/Deposition%20Solutions%20LLC%20-%20Breach%20Notification%20Letter%20%28Adult%29%20-%20Final%20Proof.pdf",
          "external_id": "cit:86f326fc-3643-459e-be11-e7972ac29b36",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:1e9098dce6c839a1716c73bad359adbe74502c77a924d9c0ec8ea27d999f1813"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Manual review of information scattered through legal testimony took months; Lexitas said law enforcement did not delay notification."
      }
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--b7cd8c5b-c0b8-5625-8c77-f6376098a26d",
      "created": "2026-10-23T14:20:19.933848+00:00",
      "modified": "2026-10-23T14:20:19.933848+00:00",
      "x_ally_original_id": "evt:e2eb1f6b-191c-427a-a100-06d9c9e5cdf7",
      "name": "Individual notice dated"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--c9284673-a53c-5cc5-8b8b-1a0e56578669",
      "created": "2026-10-23T14:20:19.933848+00:00",
      "modified": "2026-10-23T14:20:19.933848+00:00",
      "x_ally_original_id": "evt:e4daf58a-6f13-428f-9d93-bced641b497a",
      "name": "Exposure reported and access restricted"
    }
  ]
}