{
  "type": "bundle",
  "id": "bundle--be35f16c-4957-50f6-83ab-fb9bf52d15e0",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--35f90567-06ea-533a-8e57-675718dba511",
      "created": "2026-10-16T11:10:20.760154+00:00",
      "modified": "2026-10-16T11:10:20.760154+00:00",
      "x_ally_original_id": "org:4c61e2e3-5fd2-4366-a5aa-b67b3f0367bd",
      "name": "Porter & Company LLC",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--933062f9-3e92-5743-89c3-3c9cb2182882",
      "created": "2026-10-16T11:10:20.760154+00:00",
      "modified": "2026-10-16T11:10:20.760154+00:00",
      "x_ally_original_id": "brh:28b367b0-6418-43a9-8f82-cacd34d8ac44",
      "name": "Porter & Company website data incident"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--cc88950c-00e3-53f3-8a34-86937fe5fab5",
      "created": "2026-10-16T11:10:20.760154+00:00",
      "modified": "2026-10-16T11:10:20.760154+00:00",
      "x_ally_original_id": "inc:54fbba7d-27c7-45d9-88e2-1dc38a5a8a83",
      "name": "Porter & Company website data incident"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--ad5140a4-630d-56f6-8c36-0d61eea6bae0",
      "created": "2026-10-16T11:10:20.760154+00:00",
      "modified": "2026-10-16T11:10:20.760154+00:00",
      "x_ally_original_id": "clm:ec540924-603e-4fb4-b344-8be9084f45b2",
      "relationship_type": "resulted-in",
      "source_ref": "incident--cc88950c-00e3-53f3-8a34-86937fe5fab5",
      "target_ref": "x-ally-event--808f874e-b2b6-5aa3-8c2c-287b9e52f9aa",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Porter & Company LLC",
          "url": "https://oag.ca.gov/system/files/Redacted_-_Porter__Company_-_Adult_No_CM_Notice_Letter_Template%2840257131.2%29_V2_40289983v1.pdf",
          "external_id": "cit:a5e9311c-7161-4039-9baa-d75be8c58fb5",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:2c4e75361ec437fab083fd083180829d3386d67b8238bd690afe920caf6dc411"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--c198c271-2448-54ac-8396-91294ef2da64",
      "created": "2026-10-16T11:10:20.760154+00:00",
      "modified": "2026-10-16T11:10:20.760154+00:00",
      "x_ally_original_id": "clm:48571e28-e3a0-4f4e-9414-9b962ec6fdc2",
      "relationship_type": "affected-organization",
      "source_ref": "incident--cc88950c-00e3-53f3-8a34-86937fe5fab5",
      "target_ref": "identity--35f90567-06ea-533a-8e57-675718dba511",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Porter & Company LLC",
          "url": "https://oag.ca.gov/system/files/Redacted_-_Porter__Company_-_Adult_No_CM_Notice_Letter_Template%2840257131.2%29_V2_40289983v1.pdf",
          "external_id": "cit:ca4b17e8-7870-47b0-9020-de1ed56344d2",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:2c4e75361ec437fab083fd083180829d3386d67b8238bd690afe920caf6dc411"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--08a81ff9-2237-59f8-83b1-babdce85e147",
      "created": "2026-10-16T11:10:20.760154+00:00",
      "modified": "2026-10-16T11:10:20.760154+00:00",
      "x_ally_original_id": "clm:05e880d6-e7e3-446b-974c-b233b0d4bea8",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Porter & Company LLC",
          "url": "https://oag.ca.gov/system/files/Redacted_-_Porter__Company_-_Adult_No_CM_Notice_Letter_Template%2840257131.2%29_V2_40289983v1.pdf",
          "external_id": "cit:f37cec02-d6db-4ef0-86c4-e8c893a05323",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:2c4e75361ec437fab083fd083180829d3386d67b8238bd690afe920caf6dc411"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The investigation identified possible personal-information access or acquisition on two earlier dates."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--1bdd37bb-3c78-5431-8be8-461ac4acc0e9",
      "created": "2026-10-16T11:10:20.760154+00:00",
      "modified": "2026-10-16T11:10:20.760154+00:00",
      "x_ally_original_id": "clm:365364f1-242a-4980-8abd-5b979bfd23c7",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Porter & Company LLC",
          "url": "https://oag.ca.gov/system/files/Redacted_-_Porter__Company_-_Adult_No_CM_Notice_Letter_Template%2840257131.2%29_V2_40289983v1.pdf",
          "external_id": "cit:9b6c4c9a-db90-4cac-a1c2-5543f0524567",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:2c4e75361ec437fab083fd083180829d3386d67b8238bd690afe920caf6dc411"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The company secured its website, investigated with external cybersecurity professionals and provided an assistance line and identity-protection guidance."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--781ac630-4476-540a-8a5d-41324944adde",
      "created": "2026-10-16T11:10:20.760154+00:00",
      "modified": "2026-10-16T11:10:20.760154+00:00",
      "x_ally_original_id": "clm:3191a598-1906-4dd5-a2e4-7667adb15de3",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Porter & Company LLC",
          "url": "https://oag.ca.gov/system/files/Redacted_-_Porter__Company_-_Adult_No_CM_Notice_Letter_Template%2840257131.2%29_V2_40289983v1.pdf",
          "external_id": "cit:78eb5c6c-d2b4-4b32-afe2-7b49ca72fa8e",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:2c4e75361ec437fab083fd083180829d3386d67b8238bd690afe920caf6dc411"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-06"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--f67c4031-4ebd-562f-8779-79959914eb18",
      "created": "2026-10-16T11:10:20.760154+00:00",
      "modified": "2026-10-16T11:10:20.760154+00:00",
      "x_ally_original_id": "clm:3be964d0-b232-4361-a069-66aa4a37b10e",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Porter & Company LLC",
          "url": "https://oag.ca.gov/system/files/Redacted_-_Porter__Company_-_Adult_No_CM_Notice_Letter_Template%2840257131.2%29_V2_40289983v1.pdf",
          "external_id": "cit:c9202750-ab58-4125-8d4b-bbc141bba273",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:2c4e75361ec437fab083fd083180829d3386d67b8238bd690afe920caf6dc411"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The investigation determined on October 6 that files containing personal information may have been accessed or acquired for periods of hours on August 30 and September 11."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--fb71282c-fb37-5448-8353-07f46c2b1d90",
      "created": "2026-10-16T11:10:20.760154+00:00",
      "modified": "2026-10-16T11:10:20.760154+00:00",
      "x_ally_original_id": "clm:65492b31-d6ab-4312-aff1-17e8b2ca70cd",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Porter & Company LLC",
          "url": "https://oag.ca.gov/system/files/Redacted_-_Porter__Company_-_Adult_No_CM_Notice_Letter_Template%2840257131.2%29_V2_40289983v1.pdf",
          "external_id": "cit:3d0a5ad4-f494-413e-9686-bba4f1435f99",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:2c4e75361ec437fab083fd083180829d3386d67b8238bd690afe920caf6dc411"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Porter & Company identified activity indicating unauthorized website access around August 30, 2026."
      }
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--808f874e-b2b6-5aa3-8c2c-287b9e52f9aa",
      "created": "2026-10-16T11:10:20.760154+00:00",
      "modified": "2026-10-16T11:10:20.760154+00:00",
      "x_ally_original_id": "evt:5a367370-3323-4dd9-80a0-2552faf7eee4",
      "name": "Data-impact finding reached"
    }
  ]
}