{
  "type": "bundle",
  "id": "bundle--4a01ab42-5e4a-51bf-871b-c42d18a33cc7",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--41e87ffd-475b-5157-81d7-c2bf50512ca6",
      "created": "2026-08-09T00:53:00Z",
      "modified": "2026-08-09T00:53:00Z",
      "x_ally_original_id": "org:b3c642d7-d402-4e46-9349-dcc864c75d4d",
      "name": "Washington State Health Care Authority",
      "identity_class": "organization"
    },
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--85dde25c-d697-55e5-81ab-90d0e4104f17",
      "created": "2026-08-09T00:53:00Z",
      "modified": "2026-08-09T00:53:00Z",
      "x_ally_original_id": "org:2c8a33f6-3222-4f0e-b639-4edf48016a4b",
      "name": "Navia Benefit Solutions, Inc.",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--74160297-dafb-5f55-8d6c-139a75c5fe20",
      "created": "2026-08-09T00:53:00Z",
      "modified": "2026-08-09T00:53:00Z",
      "x_ally_original_id": "inc:95fd888b-b0b7-4320-98c6-84c60f6b270f",
      "name": "December 2025–January 2026 Navia API incident"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--78da8d5c-8507-5f1a-88ac-4b654aabcb75",
      "created": "2026-08-09T00:53:00Z",
      "modified": "2026-08-09T00:53:00Z",
      "x_ally_original_id": "brh:12912630-e944-4e70-9a24-5f1abea1b959",
      "name": "Navia Benefit Solutions API data breach"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--011116af-cbee-54d8-893d-4ad681f8d847",
      "created": "2026-08-09T00:53:00Z",
      "modified": "2026-08-09T00:53:00Z",
      "x_ally_original_id": "clm:4e056ea1-e1b5-49cf-b454-44ca6216f2f8",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--9b3294da-d502-5ee0-8407-7ba924fd9e3a",
      "target_ref": "x-ally-data-category--3f5d8a0f-8004-55e3-8595-3965855aa3a3",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Washington State Health Care Authority",
          "url": "https://content.govdelivery.com/accounts/WAHCA/bulletins/40c7b47",
          "external_id": "cit:8ac10137-1152-4c62-8468-ebfdd5e50bd0",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:a3e3aff06c56ba2870aa51127f396b177c7658e7ef6b66abd5d9bc8c8345244c"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--0f6d342f-a6a7-5026-83b7-86036b77f683",
      "created": "2026-08-09T00:53:00Z",
      "modified": "2026-08-09T00:53:00Z",
      "x_ally_original_id": "clm:6a2c2cc7-7973-46ec-9c05-ee76310c8b23",
      "relationship_type": "affected-organization",
      "source_ref": "incident--74160297-dafb-5f55-8d6c-139a75c5fe20",
      "target_ref": "identity--85dde25c-d697-55e5-81ab-90d0e4104f17",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Navia Benefit Solutions, Inc.",
          "url": "https://oag.ca.gov/system/files/Navia%20Benefit%20Solutions%20-%20Notice%20of%20Data%20Event%20-%20CA_0.pdf",
          "external_id": "cit:846cf0f9-e137-4662-b660-2d200e2c42fe",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:8cbe3abc7ba1549122119d51c3aded68dbace2b9886c9e5c775aaf132212e127"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--26e85cd7-3ac8-5300-8f42-d271bd5347cd",
      "created": "2026-08-09T00:53:00Z",
      "modified": "2026-08-09T00:53:00Z",
      "x_ally_original_id": "clm:3198d9f1-be0f-42bd-96d0-a66a383ba10e",
      "relationship_type": "resulted-in",
      "source_ref": "incident--74160297-dafb-5f55-8d6c-139a75c5fe20",
      "target_ref": "x-ally-data-exposure--9b3294da-d502-5ee0-8407-7ba924fd9e3a",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Navia Benefit Solutions, Inc.",
          "url": "https://oag.ca.gov/system/files/Navia%20Benefit%20Solutions%20-%20Notice%20of%20Data%20Event%20-%20CA_0.pdf",
          "external_id": "cit:ed887389-6c97-4804-b13e-07697c98803b",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:8cbe3abc7ba1549122119d51c3aded68dbace2b9886c9e5c775aaf132212e127"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--4b4aa042-ace1-5414-8c78-11b0ebe58942",
      "created": "2026-08-09T00:53:00Z",
      "modified": "2026-08-09T00:53:00Z",
      "x_ally_original_id": "clm:e71d411b-e4d3-4b27-a002-98f43e697fe7",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--9b3294da-d502-5ee0-8407-7ba924fd9e3a",
      "target_ref": "x-ally-data-category--c79f34f3-405d-57d2-8409-98eff3898231",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Washington State Health Care Authority",
          "url": "https://content.govdelivery.com/accounts/WAHCA/bulletins/40c7b47",
          "external_id": "cit:5e13f052-a5b1-4eec-a321-3de5185b3a99",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:a3e3aff06c56ba2870aa51127f396b177c7658e7ef6b66abd5d9bc8c8345244c"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--74ea856d-196d-5f2e-8163-52de7b6c894b",
      "created": "2026-08-09T00:53:00Z",
      "modified": "2026-08-09T00:53:00Z",
      "x_ally_original_id": "clm:b8fef76e-cf48-415f-ab8b-14e3f0158a03",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--9b3294da-d502-5ee0-8407-7ba924fd9e3a",
      "target_ref": "x-ally-data-category--a2b7dd9d-0c02-5710-88ed-ea507d0ffa07",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Washington State Health Care Authority",
          "url": "https://content.govdelivery.com/accounts/WAHCA/bulletins/40c7b47",
          "external_id": "cit:3ed31915-7642-4994-9c99-2503975f36cd",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:a3e3aff06c56ba2870aa51127f396b177c7658e7ef6b66abd5d9bc8c8345244c"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--c4c57519-58f5-5db0-8a45-0bb3bff6dfdc",
      "created": "2026-08-09T00:53:00Z",
      "modified": "2026-08-09T00:53:00Z",
      "x_ally_original_id": "clm:4c66b150-e09d-4e8c-9f22-e6f2e12652c7",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--9b3294da-d502-5ee0-8407-7ba924fd9e3a",
      "target_ref": "x-ally-data-category--ab430a0e-23bc-5177-814b-26f716196ca0",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Washington State Health Care Authority",
          "url": "https://content.govdelivery.com/accounts/WAHCA/bulletins/40c7b47",
          "external_id": "cit:3971d596-d17b-44dd-b438-789a5456bd0e",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:a3e3aff06c56ba2870aa51127f396b177c7658e7ef6b66abd5d9bc8c8345244c"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--c4cc7602-c02c-5f0e-8494-ac562c5dcfa5",
      "created": "2026-08-09T00:53:00Z",
      "modified": "2026-08-09T00:53:00Z",
      "x_ally_original_id": "clm:7247c62d-e7a7-41b3-84da-9da99a0fe7d8",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--9b3294da-d502-5ee0-8407-7ba924fd9e3a",
      "target_ref": "x-ally-data-category--ff2c8174-4feb-535f-8a4d-be23ee26eff2",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Washington State Health Care Authority",
          "url": "https://content.govdelivery.com/accounts/WAHCA/bulletins/40c7b47",
          "external_id": "cit:9357118b-6b49-45ff-bc4a-b2d6aabc6dfe",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:a3e3aff06c56ba2870aa51127f396b177c7658e7ef6b66abd5d9bc8c8345244c"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--ca29229e-1e36-5bcc-8aeb-081b25bebe8c",
      "created": "2026-08-09T00:53:00Z",
      "modified": "2026-08-09T00:53:00Z",
      "x_ally_original_id": "clm:40eec8de-69e2-414b-9c5a-730feb643cf7",
      "relationship_type": "affected-organization",
      "source_ref": "incident--74160297-dafb-5f55-8d6c-139a75c5fe20",
      "target_ref": "identity--41e87ffd-475b-5157-81d7-c2bf50512ca6",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Washington State Health Care Authority",
          "url": "https://content.govdelivery.com/accounts/WAHCA/bulletins/40c7b47",
          "external_id": "cit:fa39f932-5c6f-4e2f-a928-fe87d7aae213",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:a3e3aff06c56ba2870aa51127f396b177c7658e7ef6b66abd5d9bc8c8345244c"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--e195e06c-8661-57e9-838f-0fe8bf0eea48",
      "created": "2026-08-09T00:53:00Z",
      "modified": "2026-08-09T00:53:00Z",
      "x_ally_original_id": "clm:ebfbd43b-a952-4f7a-812f-4e741ae6defa",
      "relationship_type": "resulted-in",
      "source_ref": "incident--74160297-dafb-5f55-8d6c-139a75c5fe20",
      "target_ref": "x-ally-notification--329cd348-2e37-5975-8026-2da704e4fd58",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Navia Benefit Solutions, Inc.",
          "url": "https://oag.ca.gov/system/files/Navia%20Benefit%20Solutions%20-%20Notice%20of%20Data%20Event%20-%20CA_0.pdf",
          "external_id": "cit:95c82126-7ff2-472b-9171-6615930b93ad",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:8cbe3abc7ba1549122119d51c3aded68dbace2b9886c9e5c775aaf132212e127"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--121557f1-0c81-5caa-8c83-889b08afd1ca",
      "created": "2026-08-09T00:53:00Z",
      "modified": "2026-08-09T00:53:00Z",
      "x_ally_original_id": "clm:80dea9e9-d716-4658-a732-aa0a47b0351a",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "U.S. Department of Health and Human Services Office for Civil Rights",
          "url": "https://ocrportal.hhs.gov/ocr/breach/breach_report_hip.jsf",
          "external_id": "cit:3a5c0df2-273f-48e5-a30c-06a0f3b47136",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:bf8f6e5c0228d03313c55cba60fe37d12419f7be6d8c16b1541ac69a075d1d7b"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "integer",
        "value": 2151330,
        "unit": "individual"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--2ddd144e-54ef-5eb6-8c81-19a8422a99e0",
      "created": "2026-08-09T00:53:00Z",
      "modified": "2026-08-09T00:53:00Z",
      "x_ally_original_id": "clm:07b1e1e7-b249-4848-a861-de7368da6782",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Office of the Attorney General of Texas",
          "url": "https://www.texasattorneygeneral.gov/consumer-protection/data-breach-reporting",
          "external_id": "cit:ea83e320-6ff6-4f3b-8dad-825bb2089458",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:2c5cd9f0b0662a1c03740292fa259f82569698037fbada39c6e22e967815ffea"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "integer",
        "value": 62821,
        "unit": "individual"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--541d1ef6-b793-5dc1-874f-69213958b95a",
      "created": "2026-08-09T00:53:00Z",
      "modified": "2026-08-09T00:53:00Z",
      "x_ally_original_id": "clm:d8d41d15-46db-4342-90be-a0e0f1a1e2a5",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Navia Benefit Solutions, Inc.",
          "url": "https://oag.ca.gov/system/files/Navia%20Benefit%20Solutions%20-%20Notice%20of%20Data%20Event%20-%20CA_0.pdf",
          "external_id": "cit:259404fc-f332-4f4f-92e9-fdf9ebf294f8",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:8cbe3abc7ba1549122119d51c3aded68dbace2b9886c9e5c775aaf132212e127"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Navia's California notice says no claims or financial data were disclosed; Washington HCA separately reported no evidence of access to claims data or members' bank-account information."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--58ba7bdc-8f9e-5b07-8672-a3bdf0edbe61",
      "created": "2026-08-09T00:53:00Z",
      "modified": "2026-08-09T00:53:00Z",
      "x_ally_original_id": "clm:e56511e8-4f8a-4742-aeb4-bc2b6892941f",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Navia Benefit Solutions, Inc.",
          "url": "https://oag.ca.gov/system/files/Navia%20Benefit%20Solutions%20-%20Notice%20of%20Data%20Event%20-%20CA_0.pdf",
          "external_id": "cit:c8ad3e73-f238-46ce-96e0-844672365907",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:8cbe3abc7ba1549122119d51c3aded68dbace2b9886c9e5c775aaf132212e127"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2025-12-22"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--67d4c02f-aa6a-5af2-863f-eee59c8a279a",
      "created": "2026-08-09T00:53:00Z",
      "modified": "2026-08-09T00:53:00Z",
      "x_ally_original_id": "clm:34111951-74ba-4e98-835b-b5fc74e6e7fc",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Navia Benefit Solutions, Inc.",
          "url": "https://oag.ca.gov/system/files/Navia%20Benefit%20Solutions%20-%20Notice%20of%20Data%20Event%20-%20CA_0.pdf",
          "external_id": "cit:a6e5f99f-28f2-453a-92c5-53403b03dca1",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:8cbe3abc7ba1549122119d51c3aded68dbace2b9886c9e5c775aaf132212e127"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "At the time of the California notice, Navia said it was unaware of attempted or actual misuse of the recipient's information."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--6f2b2db0-bba3-5440-8d65-c39a1520f76c",
      "created": "2026-08-09T00:53:00Z",
      "modified": "2026-08-09T00:53:00Z",
      "x_ally_original_id": "clm:b1c1d9bf-e96a-4a56-9d47-a507e01a3516",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Navia Benefit Solutions, Inc.",
          "url": "https://oag.ca.gov/system/files/Navia%20Benefit%20Solutions%20-%20Notice%20of%20Data%20Event%20-%20CA_0.pdf",
          "external_id": "cit:f9e07c14-e951-4819-b658-3eb2f6d65099",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:8cbe3abc7ba1549122119d51c3aded68dbace2b9886c9e5c775aaf132212e127"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Navia offered complimentary Kroll identity monitoring, including credit monitoring, fraud consultation, and identity-theft restoration; the duration is redacted in the California sample."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--78453806-0c81-59e1-826e-e993de3f6319",
      "created": "2026-08-09T00:53:00Z",
      "modified": "2026-08-09T00:53:00Z",
      "x_ally_original_id": "clm:f1eca8a1-b6d0-4e0c-a352-37ceebf93fb9",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Navia Benefit Solutions, Inc.",
          "url": "https://oag.ca.gov/system/files/Navia%20Benefit%20Solutions%20-%20Notice%20of%20Data%20Event%20-%20CA_0.pdf",
          "external_id": "cit:0a013c04-dd65-409f-b3a4-e469f483a268",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:8cbe3abc7ba1549122119d51c3aded68dbace2b9886c9e5c775aaf132212e127"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-01-23"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--89fe7c4a-b55b-5932-8247-863ed3f09afc",
      "created": "2026-08-09T00:53:00Z",
      "modified": "2026-08-09T00:53:00Z",
      "x_ally_original_id": "clm:26a39edf-b9c3-4bad-a53c-09def320fd8f",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Washington State Health Care Authority",
          "url": "https://content.govdelivery.com/accounts/WAHCA/bulletins/40c7b47",
          "external_id": "cit:a547061d-b938-45ba-9fca-ee8b36977e56",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:a3e3aff06c56ba2870aa51127f396b177c7658e7ef6b66abd5d9bc8c8345244c"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "integer",
        "value": 32000,
        "unit": "individual"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--8bfd0f42-89e0-5ff2-8931-7218f88bf18e",
      "created": "2026-08-09T00:53:00Z",
      "modified": "2026-08-09T00:53:00Z",
      "x_ally_original_id": "clm:e3062929-3f3c-4700-9bae-f0cd24842c5e",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Office of the Attorney General of Texas",
          "url": "https://www.texasattorneygeneral.gov/consumer-protection/data-breach-reporting",
          "external_id": "cit:33106e24-3285-4945-b12f-753e7ec0a945",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:2c5cd9f0b0662a1c03740292fa259f82569698037fbada39c6e22e967815ffea"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "integer",
        "value": 2697540,
        "unit": "individual"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--988dfb74-c56d-5310-8edb-78a9f93167eb",
      "created": "2026-08-09T00:53:00Z",
      "modified": "2026-08-09T00:53:00Z",
      "x_ally_original_id": "clm:c1c52d9c-1c22-4573-a50c-2d9dddc1fa69",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Navia Benefit Solutions, Inc.",
          "url": "https://oag.ca.gov/system/files/Navia%20Benefit%20Solutions%20-%20Notice%20of%20Data%20Event%20-%20CA_0.pdf",
          "external_id": "cit:489a9216-5b7b-4b11-b209-0970a9820990",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:8cbe3abc7ba1549122119d51c3aded68dbace2b9886c9e5c775aaf132212e127"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-01-15"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--a49b078f-d611-5fb8-806b-b05debbca0dc",
      "created": "2026-08-09T00:53:00Z",
      "modified": "2026-08-09T00:53:00Z",
      "x_ally_original_id": "clm:8008c4ba-8982-4bab-9d9d-a2d8bef6844b",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Massachusetts Office of Consumer Affairs and Business Regulation",
          "url": "https://www.mass.gov/doc/data-breach-report-2026/download",
          "external_id": "cit:55e00e2d-6e89-4de2-96dc-6e5c3f2a6eff",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5ead3dc85287618c6b9134045436f1f50cac56d0d4e0fe84d26ddf15bb97cbd4"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "integer",
        "value": 37498,
        "unit": "individual"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--a53eff07-1020-5ed9-8186-5d9e84d14b33",
      "created": "2026-08-09T00:53:00Z",
      "modified": "2026-08-09T00:53:00Z",
      "x_ally_original_id": "clm:704301c8-10f7-4dea-8ebf-b1a76336b1b4",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Washington State Health Care Authority",
          "url": "https://content.govdelivery.com/accounts/WAHCA/bulletins/40c7b47",
          "external_id": "cit:d649fee4-e3c9-4262-b30c-65f7f605bd1b",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:a3e3aff06c56ba2870aa51127f396b177c7658e7ef6b66abd5d9bc8c8345244c"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Washington HCA said Navia fixed the system vulnerability, engaged external forensic specialists and breach counsel, disabled participant registration temporarily, and strengthened registration and authentication controls including multifactor authentication."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--b0561cf7-b606-596c-88c9-f272acd10fd1",
      "created": "2026-08-09T00:53:00Z",
      "modified": "2026-08-09T00:53:00Z",
      "x_ally_original_id": "clm:657cd06e-eea1-4ecd-969a-515c11d0c5c3",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Navia Benefit Solutions, Inc.",
          "url": "https://oag.ca.gov/system/files/Navia%20Benefit%20Solutions%20-%20Notice%20of%20Data%20Event%20-%20CA_0.pdf",
          "external_id": "cit:9adc70a5-d644-4351-9206-3ce94d4249fa",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:8cbe3abc7ba1549122119d51c3aded68dbace2b9886c9e5c775aaf132212e127"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Navia said it investigated, reviewed system security and relevant data, notified potentially impacted individuals, and notified federal law enforcement and applicable regulators."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--bce3c7c3-99c3-52fa-8eca-1807a1b94f84",
      "created": "2026-08-09T00:53:00Z",
      "modified": "2026-08-09T00:53:00Z",
      "x_ally_original_id": "clm:af672af3-7218-473e-81cc-f82433080f90",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Washington State Health Care Authority",
          "url": "https://content.govdelivery.com/accounts/WAHCA/bulletins/40c7b47",
          "external_id": "cit:85e869c6-361e-488f-8f03-4760b438272c",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:a3e3aff06c56ba2870aa51127f396b177c7658e7ef6b66abd5d9bc8c8345244c"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Washington HCA described unauthorized read-only access through an application programming interface and a system vulnerability used to gain access; the sources reviewed do not identify the actor or assign a CVE."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--d45e81fc-d39c-527e-8cd9-0ea9a833632e",
      "created": "2026-08-09T00:53:00Z",
      "modified": "2026-08-09T00:53:00Z",
      "x_ally_original_id": "clm:b6ce8eab-6fb2-4ecc-bf75-abb27adc2ef8",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Washington State Health Care Authority",
          "url": "https://content.govdelivery.com/accounts/WAHCA/bulletins/40c7b47",
          "external_id": "cit:15f5bade-323f-4b39-8085-c25242c00071",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:a3e3aff06c56ba2870aa51127f396b177c7658e7ef6b66abd5d9bc8c8345244c"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-03-03"
      }
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--3f5d8a0f-8004-55e3-8595-3965855aa3a3",
      "created": "2026-08-09T00:53:00Z",
      "modified": "2026-08-09T00:53:00Z",
      "x_ally_original_id": "dat:1e0d7c37-aeba-4021-8b53-ca5d9ab5cbf5",
      "name": "Benefits account identifiers"
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--a2b7dd9d-0c02-5710-88ed-ea507d0ffa07",
      "created": "2026-08-08T23:12:00Z",
      "modified": "2026-08-08T23:12:00Z",
      "x_ally_original_id": "dat:559cf3f5-80c7-45ba-a930-ff0bfa8d17b0",
      "name": "Names"
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--ab430a0e-23bc-5177-814b-26f716196ca0",
      "created": "2026-08-08T23:12:00Z",
      "modified": "2026-08-08T23:12:00Z",
      "x_ally_original_id": "dat:fcd11f98-14a8-47ac-adea-68ad2985528f",
      "name": "Social Security numbers"
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--c79f34f3-405d-57d2-8409-98eff3898231",
      "created": "2026-08-08T23:12:00Z",
      "modified": "2026-08-08T23:12:00Z",
      "x_ally_original_id": "dat:5abcee7e-4a37-494a-b6ba-87ff46149be9",
      "name": "Contact information"
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--ff2c8174-4feb-535f-8a4d-be23ee26eff2",
      "created": "2026-08-08T23:12:00Z",
      "modified": "2026-08-08T23:12:00Z",
      "x_ally_original_id": "dat:ad54319a-bb47-40fb-be6c-7fd6e2aa1f68",
      "name": "Dates of birth"
    },
    {
      "type": "x-ally-data-exposure",
      "spec_version": "2.1",
      "id": "x-ally-data-exposure--9b3294da-d502-5ee0-8407-7ba924fd9e3a",
      "created": "2026-08-09T00:53:00Z",
      "modified": "2026-08-09T00:53:00Z",
      "x_ally_original_id": "exp:33f58dbe-3e72-48e9-aee9-b4b8ed1b69ee",
      "name": "Navia benefits-participant data exposure"
    },
    {
      "type": "x-ally-jurisdiction",
      "spec_version": "2.1",
      "id": "x-ally-jurisdiction--26a2a0d1-6423-54e9-8580-cb98986f2041",
      "created": "2026-08-08T23:12:00Z",
      "modified": "2026-08-08T23:12:00Z",
      "x_ally_original_id": "jur:baa42ab9-8b9f-4a7a-b8aa-b1fe626969ce",
      "name": "Massachusetts"
    },
    {
      "type": "x-ally-jurisdiction",
      "spec_version": "2.1",
      "id": "x-ally-jurisdiction--6f993069-8784-5aa9-80e7-26f143f87028",
      "created": "2026-08-08T23:58:00Z",
      "modified": "2026-08-08T23:58:00Z",
      "x_ally_original_id": "jur:93e7f2a4-c5d7-4e26-a421-fb09ee3218fe",
      "name": "Texas"
    },
    {
      "type": "x-ally-notification",
      "spec_version": "2.1",
      "id": "x-ally-notification--329cd348-2e37-5975-8026-2da704e4fd58",
      "created": "2026-08-09T00:53:00Z",
      "modified": "2026-08-09T00:53:00Z",
      "x_ally_original_id": "ntf:a6866396-52dc-4082-8220-08e538f02074",
      "name": "Navia client, public, and affected-individual notifications"
    }
  ]
}