{
  "type": "bundle",
  "id": "bundle--a5e6f27a-f1dc-52f3-804b-42b03da2e9d5",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--67503ac3-9687-5be5-8981-8b907e3750b6",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "org:53791ca8-851a-4327-a56f-cab9bdf4a2f9",
      "name": "Pathpoint, Inc.",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--0ead3722-65ea-5372-8d3e-c77acc9c5ad3",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "inc:a9f3014b-f8e3-42a6-953c-78968e239104",
      "name": "Pathpoint analytics-tool data breach"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--d8f33932-ee89-5ebb-81fd-4b5a8a4b99f1",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "brh:7aec3f4f-17a3-4a6e-b8dc-42f28e95e391",
      "name": "Pathpoint analytics-tool data breach"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--075976b7-dc93-5526-847b-063029f6c65e",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:8926d01d-02bf-4f42-94aa-fd22687186da",
      "relationship_type": "exposed-data-category",
      "source_ref": "incident--0ead3722-65ea-5372-8d3e-c77acc9c5ad3",
      "target_ref": "x-ally-data-category--e9bb6be1-7307-5485-8ab0-b45cd5b43c37",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Pathpoint, Inc.",
          "url": "https://www.pathpoint.com/blog/2026-metabase-incident",
          "external_id": "cit:50164a84-42a9-4fd9-984a-deb6fdf1d55a",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:cd0ee0692420cc3700984b476e5b96e211faa20fd7bbc0ba713fe0624bc5d279"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--26bff1cd-7ecd-5c36-8207-42d33999c013",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:ffd20f74-98eb-4416-9258-369da2497a27",
      "relationship_type": "exposed-data-category",
      "source_ref": "incident--0ead3722-65ea-5372-8d3e-c77acc9c5ad3",
      "target_ref": "x-ally-data-category--c79f34f3-405d-57d2-8409-98eff3898231",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Pathpoint, Inc.",
          "url": "https://www.pathpoint.com/blog/2026-metabase-incident",
          "external_id": "cit:c5d13c94-e53c-42d6-aee8-767428e12d95",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:cd0ee0692420cc3700984b476e5b96e211faa20fd7bbc0ba713fe0624bc5d279"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--7da041d6-e4af-57e8-8552-a3fe5a5af210",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:aeddf70f-5190-48fe-90bf-22fc5e88bfd8",
      "relationship_type": "exposed-data-category",
      "source_ref": "incident--0ead3722-65ea-5372-8d3e-c77acc9c5ad3",
      "target_ref": "x-ally-data-category--ab430a0e-23bc-5177-814b-26f716196ca0",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Pathpoint, Inc.",
          "url": "https://www.pathpoint.com/blog/2026-metabase-incident",
          "external_id": "cit:5c6c94a6-31d6-44cd-be87-90a0051b3af5",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:cd0ee0692420cc3700984b476e5b96e211faa20fd7bbc0ba713fe0624bc5d279"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--93e5630e-6699-5dc7-86ef-49845b1a4f23",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:66dc0318-65b5-4238-828e-bfdae5d32619",
      "relationship_type": "affected-organization",
      "source_ref": "incident--0ead3722-65ea-5372-8d3e-c77acc9c5ad3",
      "target_ref": "identity--67503ac3-9687-5be5-8981-8b907e3750b6",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Pathpoint, Inc.",
          "url": "https://www.pathpoint.com/blog/2026-metabase-incident",
          "external_id": "cit:86eb767c-2e86-4648-826e-a9c4386d53f9",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:cd0ee0692420cc3700984b476e5b96e211faa20fd7bbc0ba713fe0624bc5d279"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--1cb2839e-563c-544c-8791-365270ed8286",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:de6308ee-f437-4d33-afe9-b799039cbb97",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Pathpoint, Inc.",
          "url": "https://www.pathpoint.com/blog/2026-metabase-incident",
          "external_id": "cit:bde1aad6-5ef3-45f7-83ac-1346d61c57e0",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:cd0ee0692420cc3700984b476e5b96e211faa20fd7bbc0ba713fe0624bc5d279"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-08-24"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--2d6e86d4-0791-56b5-8328-9c834384261c",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:0dc25638-5a3e-4a62-8f2c-49db26f1d7e3",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Pathpoint, Inc.",
          "url": "https://www.pathpoint.com/blog/2026-metabase-incident",
          "external_id": "cit:e1ac216e-d8fd-41fe-aff4-6124da316ad6",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:cd0ee0692420cc3700984b476e5b96e211faa20fd7bbc0ba713fe0624bc5d279"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-08-27"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--3a67699f-0b11-5bdb-8a59-400fb5e1d6f4",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:b53d63a7-459d-4654-b3aa-ce8008796c16",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Pathpoint, Inc.",
          "url": "https://www.pathpoint.com/blog/2026-metabase-incident",
          "external_id": "cit:38211bd9-0264-46f2-98aa-2727f45a5b9e",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:cd0ee0692420cc3700984b476e5b96e211faa20fd7bbc0ba713fe0624bc5d279"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Accessed records included contact, policy, communications and billing information, plus some Social Security and tax identifiers."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--3ca48bfa-6df8-5695-8d22-0ef93acab07f",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:5dc22c1e-1e7d-4072-9c68-2a329c078584",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Pathpoint, Inc.",
          "url": "https://www.pathpoint.com/blog/2026-metabase-incident",
          "external_id": "cit:adf37651-5d1c-42bf-8eb0-436e5ca9a07e",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:cd0ee0692420cc3700984b476e5b96e211faa20fd7bbc0ba713fe0624bc5d279"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "It patched the tool, rotated credentials and restored a clean backup."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--5644f453-ab48-53b2-819c-fdb52fedeece",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:58cdec21-3a9d-49b8-8443-3b3771fced68",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Pathpoint, Inc.",
          "url": "https://www.pathpoint.com/blog/2026-metabase-incident",
          "external_id": "cit:2e2ed175-899f-4843-86e7-30a04c78f4cc",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:cd0ee0692420cc3700984b476e5b96e211faa20fd7bbc0ba713fe0624bc5d279"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Pathpoint discovered unauthorized database access through an internal analytics tool."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--7977ed84-f512-5233-8b85-23873d1d95bc",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:22b81c54-31cc-47bb-8609-61356d6127b3",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Pathpoint, Inc.",
          "url": "https://www.pathpoint.com/blog/2026-metabase-incident",
          "external_id": "cit:e0f68643-c45c-4132-bb7a-8801a7adc3b4",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:cd0ee0692420cc3700984b476e5b96e211faa20fd7bbc0ba713fe0624bc5d279"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Pathpoint attributed access to a previously unknown third-party software flaw; downloading remained possible rather than confirmed."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--9eecb464-e522-5483-80a2-edd47e11562f",
      "created": "2026-10-07T09:27:34Z",
      "modified": "2026-10-07T09:27:34Z",
      "x_ally_original_id": "clm:6bbfb099-189b-44ad-a2f2-48e34a54a52c",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Pathpoint, Inc.",
          "url": "https://www.pathpoint.com/blog/2026-metabase-incident",
          "external_id": "cit:645ef2a5-d3e4-4c72-9198-f4de2de0254b",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:cd0ee0692420cc3700984b476e5b96e211faa20fd7bbc0ba713fe0624bc5d279"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Pathpoint reported uninterrupted services and offered affected individuals identity protection."
      }
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--ab430a0e-23bc-5177-814b-26f716196ca0",
      "created": "2026-08-08T23:12:00Z",
      "modified": "2026-08-08T23:12:00Z",
      "x_ally_original_id": "dat:fcd11f98-14a8-47ac-adea-68ad2985528f",
      "name": "Social Security numbers"
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--c79f34f3-405d-57d2-8409-98eff3898231",
      "created": "2026-08-08T23:12:00Z",
      "modified": "2026-08-08T23:12:00Z",
      "x_ally_original_id": "dat:5abcee7e-4a37-494a-b6ba-87ff46149be9",
      "name": "Contact information"
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--e9bb6be1-7307-5485-8ab0-b45cd5b43c37",
      "created": "2026-08-09T03:56:53Z",
      "modified": "2026-08-09T03:56:53Z",
      "x_ally_original_id": "dat:5716f70e-eee1-409c-b232-1d4948eae7f6",
      "name": "Tax identification numbers"
    }
  ]
}