{
  "type": "bundle",
  "id": "bundle--6006706a-f8a1-5d15-8625-b5761f872c56",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--82500cae-3211-52ee-8982-85ce0f2fec9c",
      "created": "2026-08-09T04:34:17Z",
      "modified": "2026-08-09T04:34:17Z",
      "x_ally_original_id": "org:7e2401a5-da4a-4292-adca-7086c9a3ab12",
      "name": "Marcus & Millichap, Inc.",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--99e0b367-b801-59b2-8ea9-9c722b622d85",
      "created": "2026-08-09T04:34:17Z",
      "modified": "2026-08-09T04:34:17Z",
      "x_ally_original_id": "brh:b4677a09-1437-4602-9fb7-708b75f56d28",
      "name": "Marcus & Millichap phishing data breach"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--db4065c2-5131-5100-8bab-bf22d341d461",
      "created": "2026-08-09T04:34:17Z",
      "modified": "2026-08-09T04:34:17Z",
      "x_ally_original_id": "inc:3cc4d401-b6f3-4007-a2a0-203f1a4447b1",
      "name": "April 2026 Marcus & Millichap phishing incident"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--0374aedf-5825-53b2-885d-264c02ed20ed",
      "created": "2026-08-09T04:34:17Z",
      "modified": "2026-08-09T04:34:17Z",
      "x_ally_original_id": "clm:0f21b80a-3fc6-4c97-98b4-65dcfd2ef300",
      "relationship_type": "resulted-in",
      "source_ref": "incident--db4065c2-5131-5100-8bab-bf22d341d461",
      "target_ref": "x-ally-notification--5c3a9b99-3373-55b1-87f7-393a3e521038",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Marcus & Millichap, Inc.",
          "url": "https://www.marcusmillichap.com/news-events/press/2026/04/marcus-millichap-releases-information-regarding-cybersecurity-incident",
          "external_id": "cit:7fc4ef18-cbc0-4d64-9e41-2fd3dd5142c7",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:159410eb3b9d88dc379e147fb1de76557706397abc8e6bf1a5dff356e8b57297"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--4e47d0f5-3f1b-508c-8d73-2f0c2d220ec7",
      "created": "2026-08-09T04:34:17Z",
      "modified": "2026-08-09T04:34:17Z",
      "x_ally_original_id": "clm:6e8d393e-0a06-4b4a-9f38-b69cf14c5422",
      "relationship_type": "affected-organization",
      "source_ref": "x-ally-data-exposure--88a83c6b-799a-5773-85a7-66b8d1210a6d",
      "target_ref": "identity--82500cae-3211-52ee-8982-85ce0f2fec9c",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Marcus & Millichap, Inc.",
          "url": "https://www.marcusmillichap.com/news-events/press/2026/04/marcus-millichap-releases-information-regarding-cybersecurity-incident",
          "external_id": "cit:d77da189-9560-4b80-b09a-e2298ad19975",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:159410eb3b9d88dc379e147fb1de76557706397abc8e6bf1a5dff356e8b57297"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--4f0926c7-a607-5909-8f84-21dfdbe0fc8c",
      "created": "2026-08-09T04:34:17Z",
      "modified": "2026-08-09T04:34:17Z",
      "x_ally_original_id": "clm:20b1ef53-307d-469f-a522-8d6b950e40d1",
      "relationship_type": "affected-organization",
      "source_ref": "incident--db4065c2-5131-5100-8bab-bf22d341d461",
      "target_ref": "identity--82500cae-3211-52ee-8982-85ce0f2fec9c",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Marcus & Millichap, Inc.",
          "url": "https://www.marcusmillichap.com/news-events/press/2026/04/marcus-millichap-releases-information-regarding-cybersecurity-incident",
          "external_id": "cit:040a2df8-483a-45ae-bc5a-012526b8f95f",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:159410eb3b9d88dc379e147fb1de76557706397abc8e6bf1a5dff356e8b57297"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--7dacd83c-7b1c-560a-8106-b02a4a57ddbb",
      "created": "2026-08-09T04:34:17Z",
      "modified": "2026-08-09T04:34:17Z",
      "x_ally_original_id": "clm:5458428c-81e5-4166-b18c-1a6c28c6bcd6",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--88a83c6b-799a-5773-85a7-66b8d1210a6d",
      "target_ref": "x-ally-data-category--a2b7dd9d-0c02-5710-88ed-ea507d0ffa07",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Marcus & Millichap, Inc.",
          "url": "https://www.marcusmillichap.com/news-events/press/2026/04/marcus-millichap-releases-information-regarding-cybersecurity-incident",
          "external_id": "cit:3457e26c-3a8e-40bd-8f09-d625669f4bfc",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:159410eb3b9d88dc379e147fb1de76557706397abc8e6bf1a5dff356e8b57297"
        },
        {
          "source_name": "Have I Been Pwned",
          "url": "https://haveibeenpwned.com/api/v3/breach/MarcusMillichap",
          "external_id": "cit:a6c0e4af-bae5-4a67-a964-c3fc344f8a7d",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:eb281542f719c1cb6049b721c2457b681e1bbc5e3d1d574d235123e8a5159d29"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--8691a89c-6465-5058-8d34-88967a8abca7",
      "created": "2026-08-09T04:34:17Z",
      "modified": "2026-08-09T04:34:17Z",
      "x_ally_original_id": "clm:a744e4a9-a25d-40ab-8cb2-2eb3c11501a4",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--88a83c6b-799a-5773-85a7-66b8d1210a6d",
      "target_ref": "x-ally-data-category--ff2c8174-4feb-535f-8a4d-be23ee26eff2",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Marcus & Millichap, Inc.",
          "url": "https://www.marcusmillichap.com/news-events/press/2026/04/marcus-millichap-releases-information-regarding-cybersecurity-incident",
          "external_id": "cit:328cc596-43e4-4a20-989f-d4523b35f833",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:159410eb3b9d88dc379e147fb1de76557706397abc8e6bf1a5dff356e8b57297"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--aa2c9a7a-04a2-52c9-83ba-c0c17b97bb89",
      "created": "2026-08-09T04:34:17Z",
      "modified": "2026-08-09T04:34:17Z",
      "x_ally_original_id": "clm:96956e92-c122-42c4-b331-acc1b2215be9",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--88a83c6b-799a-5773-85a7-66b8d1210a6d",
      "target_ref": "x-ally-data-category--d231d916-57a1-58de-838d-b06d89d5d407",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Marcus & Millichap, Inc.",
          "url": "https://www.marcusmillichap.com/news-events/press/2026/04/marcus-millichap-releases-information-regarding-cybersecurity-incident",
          "external_id": "cit:3d690a8f-0578-45ce-9901-257d52546cff",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:159410eb3b9d88dc379e147fb1de76557706397abc8e6bf1a5dff356e8b57297"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--be1afb0e-9f85-5baf-82f7-37106526e52f",
      "created": "2026-08-09T04:34:17Z",
      "modified": "2026-08-09T04:34:17Z",
      "x_ally_original_id": "clm:82fee575-8b58-4c1e-b1e7-23b5adcf6cf4",
      "relationship_type": "resulted-in",
      "source_ref": "incident--db4065c2-5131-5100-8bab-bf22d341d461",
      "target_ref": "x-ally-data-exposure--88a83c6b-799a-5773-85a7-66b8d1210a6d",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Marcus & Millichap, Inc.",
          "url": "https://www.marcusmillichap.com/news-events/press/2026/04/marcus-millichap-releases-information-regarding-cybersecurity-incident",
          "external_id": "cit:269d5565-f68f-4ae5-8649-98098c111434",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:159410eb3b9d88dc379e147fb1de76557706397abc8e6bf1a5dff356e8b57297"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--d5d54f50-1f6e-5cf6-8e6d-2f6d7b78118d",
      "created": "2026-08-09T04:34:17Z",
      "modified": "2026-08-09T04:34:17Z",
      "x_ally_original_id": "clm:eb24eece-0a93-49f2-9135-e42faa3d6188",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--88a83c6b-799a-5773-85a7-66b8d1210a6d",
      "target_ref": "x-ally-data-category--c79f34f3-405d-57d2-8409-98eff3898231",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Marcus & Millichap, Inc.",
          "url": "https://www.marcusmillichap.com/news-events/press/2026/04/marcus-millichap-releases-information-regarding-cybersecurity-incident",
          "external_id": "cit:ef5f2894-aa28-415a-9de9-ef725e392b4a",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:159410eb3b9d88dc379e147fb1de76557706397abc8e6bf1a5dff356e8b57297"
        },
        {
          "source_name": "Have I Been Pwned",
          "url": "https://haveibeenpwned.com/api/v3/breach/MarcusMillichap",
          "external_id": "cit:90623dcf-6346-4813-872a-cdf61db25074",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:eb281542f719c1cb6049b721c2457b681e1bbc5e3d1d574d235123e8a5159d29"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--d7d19c9b-e3df-5742-8e8c-019ca0ec9d9a",
      "created": "2026-08-09T04:34:17Z",
      "modified": "2026-08-09T04:34:17Z",
      "x_ally_original_id": "clm:604dd28b-017a-463c-867d-a003da09a5e3",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--88a83c6b-799a-5773-85a7-66b8d1210a6d",
      "target_ref": "x-ally-data-category--772969d5-39f4-5aa9-8123-4f12a64d1594",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Have I Been Pwned",
          "url": "https://haveibeenpwned.com/api/v3/breach/MarcusMillichap",
          "external_id": "cit:cf013dfc-b963-4f92-a3bb-fac1be0bca3b",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:eb281542f719c1cb6049b721c2457b681e1bbc5e3d1d574d235123e8a5159d29"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--1dba5f1b-f259-5708-8722-82dfbc68a6fb",
      "created": "2026-08-09T04:34:17Z",
      "modified": "2026-08-09T04:34:17Z",
      "x_ally_original_id": "clm:578744b3-f890-4471-af70-3914dc0b730c",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Marcus & Millichap, Inc.",
          "url": "https://www.marcusmillichap.com/news-events/press/2026/04/marcus-millichap-releases-information-regarding-cybersecurity-incident",
          "external_id": "cit:bef70270-accf-4090-a656-f3b6e7e6cf03",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:159410eb3b9d88dc379e147fb1de76557706397abc8e6bf1a5dff356e8b57297"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The accessed data included non-sensitive company materials such as SharePoint templates, forms, and reports."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--22769cfa-a059-5e9c-825c-aa8fe51df724",
      "created": "2026-08-09T04:34:17Z",
      "modified": "2026-08-09T04:34:17Z",
      "x_ally_original_id": "clm:1b11567d-56d6-45d4-ba38-ddbac963e493",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Have I Been Pwned",
          "url": "https://haveibeenpwned.com/api/v3/breach/MarcusMillichap",
          "external_id": "cit:f3ce9422-fcd8-4142-98e1-b8a3fe1e9412",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:eb281542f719c1cb6049b721c2457b681e1bbc5e3d1d574d235123e8a5159d29"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "integer",
        "value": 1837078,
        "unit": "record"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--30ac5382-86c3-592b-8714-90d43ea82343",
      "created": "2026-08-09T04:34:17Z",
      "modified": "2026-08-09T04:34:17Z",
      "x_ally_original_id": "clm:4cda3d30-02e8-4479-8984-75ce4bd2f76e",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Marcus & Millichap, Inc.",
          "url": "https://ir.marcusmillichap.com/sec-filings/all-sec-filings/content/0001628280-26-032300/mmi-20260331.htm",
          "external_id": "cit:92309151-967a-4b10-b924-02470d489424",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:f83a465e6baa143a762618231bd7a3495fe503749894c8c983c3ea192052afc4"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Marcus & Millichap said it did not believe the incident had materially affected its business, financial condition, or results of operations."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--384c01e2-03b5-5353-850d-f11e23eb2f02",
      "created": "2026-08-09T04:34:17Z",
      "modified": "2026-08-09T04:34:17Z",
      "x_ally_original_id": "clm:d94a1065-4662-47ca-8348-8c2052964b37",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Marcus & Millichap, Inc.",
          "url": "https://www.marcusmillichap.com/news-events/press/2026/04/marcus-millichap-releases-information-regarding-cybersecurity-incident",
          "external_id": "cit:772a503b-042d-4938-8582-fd7fed09c910",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:159410eb3b9d88dc379e147fb1de76557706397abc8e6bf1a5dff356e8b57297"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The threat actor released the accessed data, and the company said the released data was consistent with the data categories in its FAQ."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--5797fc25-a926-59b5-8e75-bcdd25aec720",
      "created": "2026-08-09T04:34:17Z",
      "modified": "2026-08-09T04:34:17Z",
      "x_ally_original_id": "clm:60024089-a974-42f6-a589-107e41eb23a6",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Marcus & Millichap, Inc.",
          "url": "https://www.marcusmillichap.com/news-events/press/2026/04/marcus-millichap-releases-information-regarding-cybersecurity-incident",
          "external_id": "cit:5a323204-f37d-4aa9-bbbe-75b1ca227623",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:159410eb3b9d88dc379e147fb1de76557706397abc8e6bf1a5dff356e8b57297"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The company found no indication that financial account numbers, Social Security numbers, driver's license numbers, passport information, or similar government-issued identification data were accessed."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--64fed0bd-b7a2-584b-8a86-0b8e0c0c2d8d",
      "created": "2026-08-09T04:34:17Z",
      "modified": "2026-08-09T04:34:17Z",
      "x_ally_original_id": "clm:f2f1b90c-a9ba-41e3-b631-71eb24580362",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Marcus & Millichap, Inc.",
          "url": "https://www.marcusmillichap.com/news-events/press/2026/04/marcus-millichap-releases-information-regarding-cybersecurity-incident",
          "external_id": "cit:febb9e44-6df3-421d-bca2-514f5cb3fe3f",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:159410eb3b9d88dc379e147fb1de76557706397abc8e6bf1a5dff356e8b57297"
        },
        {
          "source_name": "Marcus & Millichap, Inc.",
          "url": "https://ir.marcusmillichap.com/sec-filings/all-sec-filings/content/0001628280-26-032300/mmi-20260331.htm",
          "external_id": "cit:88cee4b1-88b8-46aa-b7d6-c6e303a68e52",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:f83a465e6baa143a762618231bd7a3495fe503749894c8c983c3ea192052afc4"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The company reported no disruption to operations or business continuity and said no other portions of its network environment were impacted."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--94f7d351-a3dd-5fe0-87ce-d0cf7ceddc3d",
      "created": "2026-08-09T04:34:17Z",
      "modified": "2026-08-09T04:34:17Z",
      "x_ally_original_id": "clm:58c8c6d1-8876-4f3d-a152-d73fe018c100",
      "confidence": 90,
      "external_references": [
        {
          "source_name": "Have I Been Pwned",
          "url": "https://haveibeenpwned.com/api/v3/breach/MarcusMillichap",
          "external_id": "cit:f5a375f3-2e34-40e8-958e-547c5e0552ae",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:eb281542f719c1cb6049b721c2457b681e1bbc5e3d1d574d235123e8a5159d29"
        },
        {
          "source_name": "Marcus & Millichap, Inc.",
          "url": "https://www.marcusmillichap.com/news-events/press/2026/04/marcus-millichap-releases-information-regarding-cybersecurity-incident",
          "external_id": "cit:d165af66-e8e7-4264-ae40-1e5cedfcc505",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:159410eb3b9d88dc379e147fb1de76557706397abc8e6bf1a5dff356e8b57297"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-04-12"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--9dcffad3-86e9-591b-81cd-e59f6af084e5",
      "created": "2026-08-09T04:34:17Z",
      "modified": "2026-08-09T04:34:17Z",
      "x_ally_original_id": "clm:4caabb18-85af-45f0-9fcc-4082d3524a93",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Marcus & Millichap, Inc.",
          "url": "https://www.marcusmillichap.com/news-events/press/2026/04/marcus-millichap-releases-information-regarding-cybersecurity-incident",
          "external_id": "cit:f1c68cbd-273e-4fa1-9fe4-ba28cd70bd1a",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:159410eb3b9d88dc379e147fb1de76557706397abc8e6bf1a5dff356e8b57297"
        },
        {
          "source_name": "Marcus & Millichap, Inc.",
          "url": "https://ir.marcusmillichap.com/sec-filings/all-sec-filings/content/0001628280-26-032300/mmi-20260331.htm",
          "external_id": "cit:65a5dec5-5f9a-465e-bfb5-6f4087225280",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:f83a465e6baa143a762618231bd7a3495fe503749894c8c983c3ea192052afc4"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "An unauthorized third party used social engineering techniques to obtain a single employee's login credentials and access certain company systems."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--9f819c92-607d-5266-8fab-328a2ca5b025",
      "created": "2026-08-09T04:34:17Z",
      "modified": "2026-08-09T04:34:17Z",
      "x_ally_original_id": "clm:bb2e3167-0a3a-43b1-a71e-dc125f6440d9",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Marcus & Millichap, Inc.",
          "url": "https://www.marcusmillichap.com/news-events/press/2026/04/marcus-millichap-releases-information-regarding-cybersecurity-incident",
          "external_id": "cit:df2f015f-5f74-4b52-b2a7-0fc28a280084",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:159410eb3b9d88dc379e147fb1de76557706397abc8e6bf1a5dff356e8b57297"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Marcus & Millichap activated its incident-response protocols, engaged outside cybersecurity experts, and notified law enforcement."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--a097000d-7a22-50ab-86ca-000e9ab4f6b0",
      "created": "2026-08-09T04:34:17Z",
      "modified": "2026-08-09T04:34:17Z",
      "x_ally_original_id": "clm:a1f4b1d7-7b73-4e76-bd64-d941fd7cbbdc",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Marcus & Millichap, Inc.",
          "url": "https://www.marcusmillichap.com/news-events/press/2026/04/marcus-millichap-releases-information-regarding-cybersecurity-incident",
          "external_id": "cit:476703b3-8045-49cd-acc0-812f97278a68",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:159410eb3b9d88dc379e147fb1de76557706397abc8e6bf1a5dff356e8b57297"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Marcus & Millichap said it identified and contained the incident within one hour, secured all affected systems, and added security measures."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--cc19d72c-8aac-5bb2-8c92-52596c7ba5ba",
      "created": "2026-08-09T04:34:17Z",
      "modified": "2026-08-09T04:34:17Z",
      "x_ally_original_id": "clm:24fca54f-1e71-4cc9-bf50-83754364c768",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Marcus & Millichap, Inc.",
          "url": "https://www.marcusmillichap.com/news-events/press/2026/04/marcus-millichap-releases-information-regarding-cybersecurity-incident",
          "external_id": "cit:04131019-a0d1-4f61-9dad-867c96d616c1",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:159410eb3b9d88dc379e147fb1de76557706397abc8e6bf1a5dff356e8b57297"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-04-12"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--d7c53982-2f14-5cc5-8ee4-5c14edf2b5eb",
      "created": "2026-08-09T04:34:17Z",
      "modified": "2026-08-09T04:34:17Z",
      "x_ally_original_id": "clm:835534c5-b9ff-42fb-af35-24d41f9c56dc",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Marcus & Millichap, Inc.",
          "url": "https://ir.marcusmillichap.com/sec-filings/all-sec-filings/content/0001628280-26-032300/mmi-20260331.htm",
          "external_id": "cit:1fc7f65c-65f8-4295-a398-6cc5cc98e393",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:f83a465e6baa143a762618231bd7a3495fe503749894c8c983c3ea192052afc4"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The threat actor exfiltrated certain customer, employee, and internal business data."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--ffdf4341-e016-5764-8337-4ce0ccca8add",
      "created": "2026-08-09T04:34:17Z",
      "modified": "2026-08-09T04:34:17Z",
      "x_ally_original_id": "clm:52e4b449-d7d1-4fa8-a0bd-652b448f0219",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Marcus & Millichap, Inc.",
          "url": "https://www.marcusmillichap.com/news-events/press/2026/04/marcus-millichap-releases-information-regarding-cybersecurity-incident",
          "external_id": "cit:3d232502-acb1-44f8-bfbe-3a0c23daedf7",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:159410eb3b9d88dc379e147fb1de76557706397abc8e6bf1a5dff356e8b57297"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The company advised people to remain alert to unsolicited emails or calls, avoid sharing personal information in response to unexpected outreach, and report suspicious activity."
      }
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--772969d5-39f4-5aa9-8123-4f12a64d1594",
      "created": "2026-08-09T04:16:47Z",
      "modified": "2026-08-09T04:16:47Z",
      "x_ally_original_id": "dat:68fb21c1-b8d3-41b3-acf6-93b7fd596c53",
      "name": "Employment information"
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--a2b7dd9d-0c02-5710-88ed-ea507d0ffa07",
      "created": "2026-08-08T23:12:00Z",
      "modified": "2026-08-08T23:12:00Z",
      "x_ally_original_id": "dat:559cf3f5-80c7-45ba-a930-ff0bfa8d17b0",
      "name": "Names"
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--c79f34f3-405d-57d2-8409-98eff3898231",
      "created": "2026-08-08T23:12:00Z",
      "modified": "2026-08-08T23:12:00Z",
      "x_ally_original_id": "dat:5abcee7e-4a37-494a-b6ba-87ff46149be9",
      "name": "Contact information"
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--d231d916-57a1-58de-838d-b06d89d5d407",
      "created": "2026-08-09T04:34:17Z",
      "modified": "2026-08-09T04:34:17Z",
      "x_ally_original_id": "dat:21077972-d96e-4522-9a5e-b9f024d85da9",
      "name": "Property transaction information"
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--ff2c8174-4feb-535f-8a4d-be23ee26eff2",
      "created": "2026-08-08T23:12:00Z",
      "modified": "2026-08-08T23:12:00Z",
      "x_ally_original_id": "dat:ad54319a-bb47-40fb-be6c-7fd6e2aa1f68",
      "name": "Dates of birth"
    },
    {
      "type": "x-ally-data-exposure",
      "spec_version": "2.1",
      "id": "x-ally-data-exposure--88a83c6b-799a-5773-85a7-66b8d1210a6d",
      "created": "2026-08-09T04:34:17Z",
      "modified": "2026-08-09T04:34:17Z",
      "x_ally_original_id": "exp:bd0eca47-63e4-4bd3-a255-d04bd692f4b4",
      "name": "Marcus & Millichap customer, workforce, transaction, and company-data exposure"
    },
    {
      "type": "x-ally-notification",
      "spec_version": "2.1",
      "id": "x-ally-notification--5c3a9b99-3373-55b1-87f7-393a3e521038",
      "created": "2026-08-09T04:34:17Z",
      "modified": "2026-08-09T04:34:17Z",
      "x_ally_original_id": "ntf:ebad8935-3348-409c-a0cb-ad3a2971ef52",
      "name": "Marcus & Millichap April and May 2026 incident disclosures"
    }
  ]
}
