{ "type": "bundle", "id": "bundle--0cba79de-de14-5c6d-829e-126d34dfcef2", "objects": [ { "type": "identity", "spec_version": "2.1", "id": "identity--fbc3f650-4859-5015-8a71-d4b2f4fcf849", "created": "2026-11-06T14:05:34.030660+00:00", "modified": "2026-11-06T14:05:34.030660+00:00", "x_ally_original_id": "org:6eb35191-bea5-4f04-af79-575fcc4a4042", "name": "RevSpring", "identity_class": "organization" }, { "type": "incident", "spec_version": "2.1", "id": "incident--0041429d-7e39-5f0c-820b-5783ffae6d65", "created": "2026-11-06T14:05:34.030660+00:00", "modified": "2026-11-06T14:05:34.030660+00:00", "x_ally_original_id": "brh:e86bb426-68fb-44e3-ade9-7377ffdea385", "name": "RevSpring bill-pay support-tool incident" }, { "type": "incident", "spec_version": "2.1", "id": "incident--de2c5710-87f2-5ec7-872c-e0406409ba3b", "created": "2026-11-06T14:05:34.030660+00:00", "modified": "2026-11-06T14:05:34.030660+00:00", "x_ally_original_id": "inc:f954d381-7ffd-4120-b58d-0f0b715ffa4b", "name": "RevSpring bill-pay support-tool incident" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--54a3e665-802f-5cf0-8f7c-578866c01cbd", "created": "2026-11-06T14:05:34.030660+00:00", "modified": "2026-11-06T14:05:34.030660+00:00", "x_ally_original_id": "clm:cc9aabf2-3176-4e85-8843-faa2412ad6ee", "relationship_type": "resulted-in", "source_ref": "incident--de2c5710-87f2-5ec7-872c-e0406409ba3b", "target_ref": "x-ally-event--cd60e48a-c7c0-5eb2-8649-2c80f7a499ef", "confidence": 100, "external_references": [ { "source_name": "RevSpring", "url": "https://oag.ca.gov/system/files/RevSpring_California%20Notification.pdf", "external_id": "cit:77aabb7f-c2d2-4372-8cdc-23029b10ffd0", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:c25d1aefdef2655ce3ce5d2555e073ce9751e9bbf7bbaac5e3f050856f9a8da5" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6bf61e4b-7c11-5b05-8cf0-ba5bd17c8aa1", "created": "2026-11-06T14:05:34.030660+00:00", "modified": "2026-11-06T14:05:34.030660+00:00", "x_ally_original_id": "clm:56fc4c55-7ed8-42a4-ab7f-c61d5fc28dcd", "relationship_type": "affected-organization", "source_ref": "incident--de2c5710-87f2-5ec7-872c-e0406409ba3b", "target_ref": "identity--fbc3f650-4859-5015-8a71-d4b2f4fcf849", "confidence": 100, "external_references": [ { "source_name": "RevSpring", "url": "https://oag.ca.gov/system/files/RevSpring_California%20Notification.pdf", "external_id": "cit:5826a6a4-aa53-410b-9834-d917f50fde73", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:c25d1aefdef2655ce3ce5d2555e073ce9751e9bbf7bbaac5e3f050856f9a8da5" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8adc45c1-ccb5-5eb7-825c-9977578f2744", "created": "2026-11-06T14:05:34.030660+00:00", "modified": "2026-11-06T14:05:34.030660+00:00", "x_ally_original_id": "clm:f7f9fca3-c753-43ea-90e3-401d07cea300", "relationship_type": "resulted-in", "source_ref": "incident--de2c5710-87f2-5ec7-872c-e0406409ba3b", "target_ref": "x-ally-event--a9d1e021-9774-5cd2-8fe1-e56649813483", "confidence": 100, "external_references": [ { "source_name": "RevSpring", "url": "https://oag.ca.gov/system/files/RevSpring_California%20Notification.pdf", "external_id": "cit:20477f0e-2293-4566-b899-761ee6aa199e", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:c25d1aefdef2655ce3ce5d2555e073ce9751e9bbf7bbaac5e3f050856f9a8da5" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--91b604c5-a820-5fa8-8d65-87f9f572f98c", "created": "2026-11-06T14:05:34.030660+00:00", "modified": "2026-11-06T14:05:34.030660+00:00", "x_ally_original_id": "clm:b81d15f9-0814-4724-a1ad-9f38b2d4ed4a", "relationship_type": "resulted-in", "source_ref": "incident--de2c5710-87f2-5ec7-872c-e0406409ba3b", "target_ref": "x-ally-event--c56d0d09-63da-5e81-892c-27a2496dd834", "confidence": 100, "external_references": [ { "source_name": "RevSpring", "url": "https://oag.ca.gov/system/files/RevSpring_California%20Notification.pdf", "external_id": "cit:c4c479c2-262e-43a5-8f5c-911f19553e0b", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:c25d1aefdef2655ce3ce5d2555e073ce9751e9bbf7bbaac5e3f050856f9a8da5" } ] }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--22649545-b379-5a7e-867f-b928af214776", "created": "2026-11-06T14:05:34.030660+00:00", "modified": "2026-11-06T14:05:34.030660+00:00", "x_ally_original_id": "clm:1ccc6502-feb8-4306-8014-723875d1d9c8", "confidence": 100, "external_references": [ { "source_name": "RevSpring", "url": "https://oag.ca.gov/system/files/RevSpring_California%20Notification.pdf", "external_id": "cit:7d4ba40c-6724-4506-b312-e2f0ab98b55b", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:c25d1aefdef2655ce3ce5d2555e073ce9751e9bbf7bbaac5e3f050856f9a8da5" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "RevSpring discovered the possible access on August 17, investigated with outside experts, notified law enforcement and added safeguards. It offered identity monitoring; the public template leaves the duration and individual notification date blank." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--27f32709-1099-58e9-8cd5-eb454ccd23aa", "created": "2026-11-06T14:05:34.030660+00:00", "modified": "2026-11-06T14:05:34.030660+00:00", "x_ally_original_id": "clm:6fc5d4c0-19d4-4c47-90ba-3eb59458e916", "confidence": 100, "external_references": [ { "source_name": "RevSpring", "url": "https://oag.ca.gov/system/files/RevSpring_California%20Notification.pdf", "external_id": "cit:f9a19dcf-87f6-4d9c-b34c-76bd43162340", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:c25d1aefdef2655ce3ce5d2555e073ce9751e9bbf7bbaac5e3f050856f9a8da5" } ], "x_ally_claim_object": { "kind": "value", "datatype": "date", "value": "2026-05-15" } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--5d075894-75f1-5121-862f-f61b8bb4d506", "created": "2026-11-06T14:05:34.030660+00:00", "modified": "2026-11-06T14:05:34.030660+00:00", "x_ally_original_id": "clm:e4daefab-8494-426d-a22a-7831860f820c", "confidence": 100, "external_references": [ { "source_name": "RevSpring", "url": "https://oag.ca.gov/system/files/RevSpring_California%20Notification.pdf", "external_id": "cit:815c431c-7485-43c8-809d-5f8390bf782d", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:c25d1aefdef2655ce3ce5d2555e073ce9751e9bbf7bbaac5e3f050856f9a8da5" } ], "x_ally_claim_object": { "kind": "value", "datatype": "date", "value": "2026-06-01" } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--5d0ac31d-fdc8-59b9-89d3-5c4024897f4f", "created": "2026-11-06T14:05:34.030660+00:00", "modified": "2026-11-06T14:05:34.030660+00:00", "x_ally_original_id": "clm:c61fbb3a-1f9a-42e6-8f4d-34a85ffc9996", "confidence": 100, "external_references": [ { "source_name": "RevSpring", "url": "https://oag.ca.gov/system/files/RevSpring_California%20Notification.pdf", "external_id": "cit:20e6a714-1276-4583-af4e-722879a7abbf", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:c25d1aefdef2655ce3ce5d2555e073ce9751e9bbf7bbaac5e3f050856f9a8da5" } ], "x_ally_claim_object": { "kind": "value", "datatype": "date", "value": "2026-08-17" } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--6753c7c5-5ed8-55e2-8ccc-a1dd11d840f0", "created": "2026-11-06T14:05:34.030660+00:00", "modified": "2026-11-06T14:05:34.030660+00:00", "x_ally_original_id": "clm:afe9f7cf-d5bd-4d5d-a1af-33d724754fff", "confidence": 100, "external_references": [ { "source_name": "RevSpring", "url": "https://oag.ca.gov/system/files/RevSpring_California%20Notification.pdf", "external_id": "cit:9712cd10-3c75-4f1b-ae8a-bba23fbf9bc4", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:c25d1aefdef2655ce3ce5d2555e073ce9751e9bbf7bbaac5e3f050856f9a8da5" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "RevSpring said the incident did not involve providers’ own environments or electronic medical records. Diagnosis and treatment details, payment-card numbers and bank-account information were excluded." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--6d465a28-3120-564b-8f05-f193719ea9ed", "created": "2026-11-06T14:05:34.030660+00:00", "modified": "2026-11-06T14:05:34.030660+00:00", "x_ally_original_id": "clm:59484395-2907-4dc6-b74e-4c19f6ae0bfe", "confidence": 100, "external_references": [ { "source_name": "RevSpring", "url": "https://oag.ca.gov/system/files/RevSpring_California%20Notification.pdf", "external_id": "cit:b37b80c1-6421-4d66-a88c-f732865326ba", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:c25d1aefdef2655ce3ce5d2555e073ce9751e9bbf7bbaac5e3f050856f9a8da5" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "RevSpring reported that an unauthorized person used a support tool to obtain information about patients who used its healthcare bill-payment platform between May 15 and June 1, 2026." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--7ab186a3-d44f-5809-87ef-d7e89780e78d", "created": "2026-11-06T14:05:34.030660+00:00", "modified": "2026-11-06T14:05:34.030660+00:00", "x_ally_original_id": "clm:a75ec491-723b-4225-8a32-6ab76b4cd915", "confidence": 100, "external_references": [ { "source_name": "RevSpring", "url": "https://oag.ca.gov/system/files/RevSpring_California%20Notification.pdf", "external_id": "cit:75e14e4b-128c-4f82-b716-6545c0f5fc92", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:c25d1aefdef2655ce3ce5d2555e073ce9751e9bbf7bbaac5e3f050856f9a8da5" } ], "x_ally_claim_object": { "kind": "value", "datatype": "date", "value": "2026-08-17" } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--f64e1333-a188-5ccc-80b4-0e1b60b8866d", "created": "2026-11-06T14:05:34.030660+00:00", "modified": "2026-11-06T14:05:34.030660+00:00", "x_ally_original_id": "clm:1053494a-d8fe-4116-9717-68b6c0ce94eb", "confidence": 100, "external_references": [ { "source_name": "RevSpring", "url": "https://oag.ca.gov/system/files/RevSpring_California%20Notification.pdf", "external_id": "cit:20d46f80-3eea-4c15-a628-66600b9e6ede", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:c25d1aefdef2655ce3ce5d2555e073ce9751e9bbf7bbaac5e3f050856f9a8da5" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "Information varied by person and could include names, addresses, emails, phone numbers, birth dates, Social Security numbers and locations of service." } }, { "type": "x-ally-event", "spec_version": "2.1", "id": "x-ally-event--a9d1e021-9774-5cd2-8fe1-e56649813483", "created": "2026-11-06T14:05:34.030660+00:00", "modified": "2026-11-06T14:05:34.030660+00:00", "x_ally_original_id": "evt:d3e18788-1278-4792-b64f-ce815aaa60c7", "name": "Reported support-tool access began" }, { "type": "x-ally-event", "spec_version": "2.1", "id": "x-ally-event--c56d0d09-63da-5e81-892c-27a2496dd834", "created": "2026-11-06T14:05:34.030660+00:00", "modified": "2026-11-06T14:05:34.030660+00:00", "x_ally_original_id": "evt:d1e39785-0252-4053-898c-081aba772cde", "name": "Possible unauthorized access discovered" }, { "type": "x-ally-event", "spec_version": "2.1", "id": "x-ally-event--cd60e48a-c7c0-5eb2-8649-2c80f7a499ef", "created": "2026-11-06T14:05:34.030660+00:00", "modified": "2026-11-06T14:05:34.030660+00:00", "x_ally_original_id": "evt:bd560299-583b-4144-82c9-a283d61913fd", "name": "Reported support-tool access ended" } ] }