{
  "type": "bundle",
  "id": "bundle--964f81fa-2ab0-5f3b-85e1-0ddc6cd35d69",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--8f1afb18-3b46-598d-8b60-ae1ccaaf9c63",
      "created": "2026-11-07T14:15:56.075794+00:00",
      "modified": "2026-11-07T14:15:56.075794+00:00",
      "x_ally_original_id": "org:2ba7351e-dd7e-451e-bce9-e06e1b31db03",
      "name": "NSW Health",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--065244fe-2883-521c-85bb-44d634e918de",
      "created": "2026-11-07T14:15:56.075794+00:00",
      "modified": "2026-11-07T14:15:56.075794+00:00",
      "x_ally_original_id": "inc:e8791cc4-d6b4-4a11-8b10-00eca0df9485",
      "name": "NSW Health oral-health provider-document incident"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--f7c08736-ad10-5902-8aa1-50184a4f626f",
      "created": "2026-11-07T14:15:56.075794+00:00",
      "modified": "2026-11-07T14:15:56.075794+00:00",
      "x_ally_original_id": "brh:ee9c88eb-ed58-40c2-bf19-aec6f4f0de04",
      "name": "NSW Health oral-health provider-document incident"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--25ab6aae-b951-504c-8201-48cb9aa364b3",
      "created": "2026-11-07T14:15:56.075794+00:00",
      "modified": "2026-11-07T14:15:56.075794+00:00",
      "x_ally_original_id": "clm:b0fba5b9-07e5-4bbd-8b23-dce4bff41da9",
      "relationship_type": "resulted-in",
      "source_ref": "incident--065244fe-2883-521c-85bb-44d634e918de",
      "target_ref": "x-ally-event--fda2fed6-eb67-5e49-817a-e803448d543e",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "NSW Health",
          "url": "https://www.health.nsw.gov.au/oralhealth/Pages/cyber-security-incident-faqs.aspx",
          "external_id": "cit:17011981-16e4-4abe-81fd-47b300d77e46",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:abdccb8cd765d8a6143594b560bc7f0dbb7af94a13ecdf8966a08af36c8c9edc"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--30b019d8-5d72-5c3a-8b6e-a6cc36494728",
      "created": "2026-11-07T14:15:56.075794+00:00",
      "modified": "2026-11-07T14:15:56.075794+00:00",
      "x_ally_original_id": "clm:e4e5804a-5077-4107-aad6-17321dc2c273",
      "relationship_type": "resulted-in",
      "source_ref": "incident--065244fe-2883-521c-85bb-44d634e918de",
      "target_ref": "x-ally-event--f954edf5-673f-5ae6-8df1-80bc394cf3d1",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "NSW Health",
          "url": "https://www.health.nsw.gov.au/oralhealth/Pages/cyber-security-incident-faqs.aspx",
          "external_id": "cit:cb23b752-f4c1-43e2-b258-b855b3f7870d",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:abdccb8cd765d8a6143594b560bc7f0dbb7af94a13ecdf8966a08af36c8c9edc"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--eeb909f7-4bb1-52ee-8d55-ccf618180381",
      "created": "2026-11-07T14:15:56.075794+00:00",
      "modified": "2026-11-07T14:15:56.075794+00:00",
      "x_ally_original_id": "clm:9547408f-4e6f-4a33-b895-7c0842f7bb64",
      "relationship_type": "affected-organization",
      "source_ref": "incident--065244fe-2883-521c-85bb-44d634e918de",
      "target_ref": "identity--8f1afb18-3b46-598d-8b60-ae1ccaaf9c63",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "NSW Health",
          "url": "https://www.health.nsw.gov.au/oralhealth/Pages/cyber-security-incident-faqs.aspx",
          "external_id": "cit:331c5828-d167-487a-ab29-e175532cbe4c",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:abdccb8cd765d8a6143594b560bc7f0dbb7af94a13ecdf8966a08af36c8c9edc"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--10c89553-217d-53db-865f-5695c439a3e5",
      "created": "2026-11-07T14:15:56.075794+00:00",
      "modified": "2026-11-07T14:15:56.075794+00:00",
      "x_ally_original_id": "clm:a732606b-9270-4499-9450-2ea9f856a557",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "NSW Health",
          "url": "https://www.health.nsw.gov.au/oralhealth/Pages/cyber-security-incident-faqs.aspx",
          "external_id": "cit:0fca6810-4123-4075-9972-cdd4d0dd49a2",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:abdccb8cd765d8a6143594b560bc7f0dbb7af94a13ecdf8966a08af36c8c9edc"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "NSW Health secured the isolated affected server and said it considered there was no ongoing threat. Dental care, voucher issuance and payments continued; affected-practitioner notifications were being prepared while police and cyber authorities investigated."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--2c1e02f6-0033-5ee2-8edd-d275be4f1e37",
      "created": "2026-11-07T14:15:56.075794+00:00",
      "modified": "2026-11-07T14:15:56.075794+00:00",
      "x_ally_original_id": "clm:a251cc05-3662-4b22-bc2b-aca16ba9b6df",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "NSW Health",
          "url": "https://www.health.nsw.gov.au/oralhealth/Pages/cyber-security-incident-faqs.aspx",
          "external_id": "cit:3d8fa8d5-6419-4370-a4b0-2e18cc4ab081",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:abdccb8cd765d8a6143594b560bc7f0dbb7af94a13ecdf8966a08af36c8c9edc"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-29"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--3ef49485-5b5d-5fac-8db0-dc80054d4086",
      "created": "2026-11-07T14:15:56.075794+00:00",
      "modified": "2026-11-07T14:15:56.075794+00:00",
      "x_ally_original_id": "clm:11313eb1-098d-4c6f-9a1e-c555e17904a8",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "NSW Health",
          "url": "https://www.health.nsw.gov.au/oralhealth/Pages/cyber-security-incident-faqs.aspx",
          "external_id": "cit:fdecaa96-dd59-48e1-9b64-4ffde534ec21",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:abdccb8cd765d8a6143594b560bc7f0dbb7af94a13ecdf8966a08af36c8c9edc"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Records generally concerned dental practitioners’ radiation licences and vaccination documents, particularly COVID-19 vaccination statements. Individual scope remained under review; no patient data had been identified as compromised."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--4f681e09-31da-5592-893f-ee63dc809c5d",
      "created": "2026-11-07T14:15:56.075794+00:00",
      "modified": "2026-11-07T14:15:56.075794+00:00",
      "x_ally_original_id": "clm:e3116cac-2675-4d70-a7cb-a289f8dbfd23",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "NSW Health",
          "url": "https://www.health.nsw.gov.au/oralhealth/Pages/cyber-security-incident-faqs.aspx",
          "external_id": "cit:3908d969-0231-4fa5-98df-6aa172da0143",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:abdccb8cd765d8a6143594b560bc7f0dbb7af94a13ecdf8966a08af36c8c9edc"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-11-06"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--55910604-b66b-5232-8b86-e6c814318575",
      "created": "2026-11-07T14:15:56.075794+00:00",
      "modified": "2026-11-07T14:15:56.075794+00:00",
      "x_ally_original_id": "clm:ab957f65-d08d-4738-b642-d352e23b7f53",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "NSW Health",
          "url": "https://www.health.nsw.gov.au/oralhealth/Pages/cyber-security-incident-faqs.aspx",
          "external_id": "cit:9f37862c-152e-4a8e-839b-8936df112aea",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:abdccb8cd765d8a6143594b560bc7f0dbb7af94a13ecdf8966a08af36c8c9edc"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-29"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--607331ad-4520-5be0-893c-f9e07bc68b40",
      "created": "2026-11-07T14:15:56.075794+00:00",
      "modified": "2026-11-07T14:15:56.075794+00:00",
      "x_ally_original_id": "clm:1ee34128-4b27-4b1f-90b8-7c3b90dfaa5b",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "NSW Health",
          "url": "https://www.health.nsw.gov.au/oralhealth/Pages/cyber-security-incident-faqs.aspx",
          "external_id": "cit:c5188650-6751-487a-8130-d29c160b399d",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:abdccb8cd765d8a6143594b560bc7f0dbb7af94a13ecdf8966a08af36c8c9edc"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "A third party unlawfully obtained uploaded records from NSW Health’s Oral Health Fee For Service Scheme administration website on October 29, 2026. NSW Health detected the activity within hours."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--73ca2596-05cb-5415-8e88-dd25561cb4b3",
      "created": "2026-11-07T14:15:56.075794+00:00",
      "modified": "2026-11-07T14:15:56.075794+00:00",
      "x_ally_original_id": "clm:a0989576-8efd-4f58-924a-ca7bf5e2ec8b",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "NSW Health",
          "url": "https://www.health.nsw.gov.au/oralhealth/Pages/cyber-security-incident-faqs.aspx",
          "external_id": "cit:6683ffcf-58f2-4af0-83c0-a91642142c97",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:abdccb8cd765d8a6143594b560bc7f0dbb7af94a13ecdf8966a08af36c8c9edc"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-29"
      }
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--f954edf5-673f-5ae6-8df1-80bc394cf3d1",
      "created": "2026-11-07T14:15:56.075794+00:00",
      "modified": "2026-11-07T14:15:56.075794+00:00",
      "x_ally_original_id": "evt:b30dc3d4-099b-4a7d-b761-9545f23abb32",
      "name": "Provider documents obtained; incident detected"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--fda2fed6-eb67-5e49-817a-e803448d543e",
      "created": "2026-11-07T14:15:56.075794+00:00",
      "modified": "2026-11-07T14:15:56.075794+00:00",
      "x_ally_original_id": "evt:eda0790e-db5c-43d9-abf7-fcd8d8075a47",
      "name": "FAQ sets out affected document types and response"
    }
  ]
}