{
  "type": "bundle",
  "id": "bundle--f4c3a4a7-d18e-580e-8cca-2614373a1c5c",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--1896706e-a683-53fc-8234-bc3d064e175e",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "org:c6006db7-6437-426a-846b-306b7213b773",
      "name": "Stitch Connect Inc",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--24262491-7e34-5d21-835d-973fb22bc8a4",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "inc:f7323ab4-dbdd-4dc0-8eb4-ea72d4a7543a",
      "name": "Stitch member profile and private-message breach"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--41c7e6b8-10a7-5c4c-8756-07c8f8113b6a",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "brh:955d5a4f-a7b5-4f68-a4f7-9a8a5727ef6c",
      "name": "Stitch member profile and private-message breach"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--403e7992-5f8d-53c9-815a-37e71d6c18d1",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:1ddfb619-b44a-403d-acf0-a9ea810ec05e",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--6ec7e41d-986c-574d-8e24-b54860192e87",
      "target_ref": "x-ally-data-category--1acc2320-3d84-5ebd-8574-aeda793f94fe",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Stitch Connect Inc",
          "url": "https://oag.ca.gov/system/files/Email%20Sample.pdf",
          "external_id": "cit:21bca801-aec9-4cca-8174-872baa0f6072",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:6257e9b66dbfd198449b703bdeb30ed20c77ffa264678e7cbdbd74449f58ce67"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--46d722a1-afcf-53c7-8e75-2054425f71ab",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:ae9234a9-6016-4ead-8c01-380f8b769f41",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--6ec7e41d-986c-574d-8e24-b54860192e87",
      "target_ref": "x-ally-data-category--a2b7dd9d-0c02-5710-88ed-ea507d0ffa07",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Stitch Connect Inc",
          "url": "https://oag.ca.gov/system/files/Email%20Sample.pdf",
          "external_id": "cit:2d019e31-4716-444b-adfd-53c8a69e2910",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:6257e9b66dbfd198449b703bdeb30ed20c77ffa264678e7cbdbd74449f58ce67"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--8648db78-807e-594c-8795-ef7fedd09475",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:ee504e53-6875-4158-b74e-deeaba8926bb",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--6ec7e41d-986c-574d-8e24-b54860192e87",
      "target_ref": "x-ally-data-category--e88abdf1-a199-5c86-80c5-317bfbf871a1",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Stitch Connect Inc",
          "url": "https://oag.ca.gov/system/files/Email%20Sample.pdf",
          "external_id": "cit:d4cb49ad-46ec-4812-b88c-d7962ddc108b",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:6257e9b66dbfd198449b703bdeb30ed20c77ffa264678e7cbdbd74449f58ce67"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--9bcb5817-d026-5c17-8fd4-e3ce898d11a1",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:cc13294b-ef6e-4f63-90e3-dbe7a123a1f7",
      "relationship_type": "resulted-in",
      "source_ref": "incident--24262491-7e34-5d21-835d-973fb22bc8a4",
      "target_ref": "x-ally-event--0d20aac2-ca43-56f8-81db-c5d2249dc03b",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "California Department of Justice, Office of the Attorney General",
          "url": "https://oag.ca.gov/privacy/databreach/list",
          "external_id": "cit:b0af4c3b-249c-4e7c-8c95-34a557f11b84",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:0b0ab97c0c07b9151e40589e3361589e9a57e4c2e34ea115a4acfc3b354237ae"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--a144f770-0cd1-5ed8-8919-99dea91fdad6",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:cb7440f7-8713-454d-89b6-86d2d6fb5acb",
      "relationship_type": "resulted-in",
      "source_ref": "incident--24262491-7e34-5d21-835d-973fb22bc8a4",
      "target_ref": "x-ally-data-exposure--6ec7e41d-986c-574d-8e24-b54860192e87",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Stitch Connect Inc",
          "url": "https://oag.ca.gov/system/files/Email%20Sample.pdf",
          "external_id": "cit:dc6624f7-3ba2-4c50-8804-99facd5ba936",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:6257e9b66dbfd198449b703bdeb30ed20c77ffa264678e7cbdbd74449f58ce67"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--b0c90c54-ccd4-5438-8e48-185da805d3b4",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:f207502b-9d14-4075-ab03-c445eac6c0ee",
      "relationship_type": "affected-organization",
      "source_ref": "incident--24262491-7e34-5d21-835d-973fb22bc8a4",
      "target_ref": "identity--1896706e-a683-53fc-8234-bc3d064e175e",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Stitch Connect Inc",
          "url": "https://oag.ca.gov/system/files/Email%20Sample.pdf",
          "external_id": "cit:03aa8f1f-73d6-4a15-8e94-89b81ef7730e",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:6257e9b66dbfd198449b703bdeb30ed20c77ffa264678e7cbdbd74449f58ce67"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--ed313aea-aa47-542c-8256-43683a72467e",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:069b4b22-183a-42c3-a0e6-f6a80d6484f8",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--6ec7e41d-986c-574d-8e24-b54860192e87",
      "target_ref": "x-ally-data-category--81e143ab-ba3d-500b-88fa-a41aa55dc48e",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Stitch Connect Inc",
          "url": "https://oag.ca.gov/system/files/Email%20Sample.pdf",
          "external_id": "cit:7458763b-43f8-4d1d-a8f3-99cb1bb87a38",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:6257e9b66dbfd198449b703bdeb30ed20c77ffa264678e7cbdbd74449f58ce67"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--0d44a9ab-bebc-5677-8de6-427e7a86338e",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:3d98f5a9-8052-4799-a3b6-8946ea564135",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Stitch Connect Inc",
          "url": "https://oag.ca.gov/system/files/Email%20Sample.pdf",
          "external_id": "cit:c519c780-b36c-41be-9c01-314953e4af98",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:6257e9b66dbfd198449b703bdeb30ed20c77ffa264678e7cbdbd74449f58ce67"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Stitch said passwords and credit-card information were not accessed, and that account-associated email addresses and phone numbers were not accessed; contact details inside messages are a different scope."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--22d69aa3-a656-5c4f-8a0e-350f83e6fb17",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:9e5daf71-31c2-4139-b12b-f68ec01e33f1",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Stitch Connect Inc",
          "url": "https://oag.ca.gov/system/files/Email%20Sample.pdf",
          "external_id": "cit:5f8d1996-f6d0-40d0-9d9b-a3aad61deca7",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:6257e9b66dbfd198449b703bdeb30ed20c77ffa264678e7cbdbd74449f58ce67"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Information retained after account closure was included in the affected records."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--2b413591-b82a-500f-8bcc-dd241539f803",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:0b7fc0d9-9662-482f-9227-04f5b30ce45e",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "California Department of Justice, Office of the Attorney General",
          "url": "https://oag.ca.gov/privacy/databreach/list",
          "external_id": "cit:c3a5db5f-13d5-43b0-9d80-0f7e7997c68f",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:0b0ab97c0c07b9151e40589e3361589e9a57e4c2e34ea115a4acfc3b354237ae"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-18"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--33b1d9e0-3b3f-5785-80b3-a64e821d8b9f",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:0b1575bf-3752-4bea-9e4c-7305a85e213d",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Stitch Connect Inc",
          "url": "https://oag.ca.gov/system/files/Email%20Sample.pdf",
          "external_id": "cit:a47bf0b3-2252-4c2f-b778-d2a5ceafd6e3",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:6257e9b66dbfd198449b703bdeb30ed20c77ffa264678e7cbdbd74449f58ce67"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Attackers accessed the last private message exchanged between certain members."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--5edf36ba-0849-5216-8376-609b847d561e",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:490bdcc9-4417-4977-a3fe-2ee1387952a3",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Stitch Connect Inc",
          "url": "https://oag.ca.gov/system/files/Email%20Sample.pdf",
          "external_id": "cit:2efe29d3-8aa7-4f37-82d1-dde4d341c026",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:6257e9b66dbfd198449b703bdeb30ed20c77ffa264678e7cbdbd74449f58ce67"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Stitch reported sustained attacks and access to information about a small percentage of members; this wording is not a numerical population estimate."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--60b2f660-86c9-516c-8d7a-a81d678c3685",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:58fcdc87-c6f1-430d-ae85-1ece9301f3ca",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "California Department of Justice, Office of the Attorney General",
          "url": "https://oag.ca.gov/privacy/databreach/list",
          "external_id": "cit:ac92c261-2e67-48c6-8e72-1c6f2c518d29",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:0b0ab97c0c07b9151e40589e3361589e9a57e4c2e34ea115a4acfc3b354237ae"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "California lists September 18, 2026 as the reported breach date; the undated sample email describes relative days without a precise intrusion timestamp."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--aa5845b3-e57e-5d95-80af-973787f83841",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:72c5a681-0fff-4385-b953-3dac64cebbef",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Stitch Connect Inc",
          "url": "https://oag.ca.gov/system/files/Email%20Sample.pdf",
          "external_id": "cit:517fa9fa-f62d-4b3b-af66-f2cee6fa3dc7",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:6257e9b66dbfd198449b703bdeb30ed20c77ffa264678e7cbdbd74449f58ce67"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Profile information could include first name, photos, biography, interests, suburb, preferences and account status."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--d52efec9-6907-5764-8722-aa2f8c298e2f",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:2633094e-4bbc-42af-8446-8bdf90c87b19",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Stitch Connect Inc",
          "url": "https://oag.ca.gov/system/files/Email%20Sample.pdf",
          "external_id": "cit:7c44d45d-61c2-4edb-9211-f190eb327199",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:6257e9b66dbfd198449b703bdeb30ed20c77ffa264678e7cbdbd74449f58ce67"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Stitch automatically reviewed messages and alerted members whose messages might contain contact, health or financial information or a photo. The sample recipient’s messages were not found to contain those details."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--f17d7583-772a-5de4-8818-7e244ce67bc5",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "clm:342ff63b-8536-4dd8-823f-c9c314c6a593",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Stitch Connect Inc",
          "url": "https://oag.ca.gov/system/files/Email%20Sample.pdf",
          "external_id": "cit:5a309a95-a2e2-4545-85e1-4d7adcd9635f",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:6257e9b66dbfd198449b703bdeb30ed20c77ffa264678e7cbdbd74449f58ce67"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Stitch said it blocked the attacker, removed malicious accounts and closed the route used to enter."
      }
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--1acc2320-3d84-5ebd-8574-aeda793f94fe",
      "created": "2026-08-09T01:42:42Z",
      "modified": "2026-08-09T01:42:42Z",
      "x_ally_original_id": "dat:4830b7b8-6b10-4665-8955-040ac39d50b0",
      "name": "Message content"
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--81e143ab-ba3d-500b-88fa-a41aa55dc48e",
      "created": "2026-08-09T00:47:00Z",
      "modified": "2026-08-09T00:47:00Z",
      "x_ally_original_id": "dat:6821059d-a3c0-44b5-bfc2-1e099e79a4b2",
      "name": "Photographic images"
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--a2b7dd9d-0c02-5710-88ed-ea507d0ffa07",
      "created": "2026-08-08T23:12:00Z",
      "modified": "2026-08-08T23:12:00Z",
      "x_ally_original_id": "dat:559cf3f5-80c7-45ba-a930-ff0bfa8d17b0",
      "name": "Names"
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--e88abdf1-a199-5c86-80c5-317bfbf871a1",
      "created": "2026-08-09T04:16:47Z",
      "modified": "2026-08-09T04:16:47Z",
      "x_ally_original_id": "dat:92d8b8c7-0cde-4440-ae01-6c6fef5524d9",
      "name": "Geographic location information"
    },
    {
      "type": "x-ally-data-exposure",
      "spec_version": "2.1",
      "id": "x-ally-data-exposure--6ec7e41d-986c-574d-8e24-b54860192e87",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "exp:67069ee9-0c4f-4cb4-8e65-0ce778eca7d2",
      "name": "Personal information described in the notification"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--0d20aac2-ca43-56f8-81db-c5d2249dc03b",
      "created": "2026-10-20T14:13:59.757999+00:00",
      "modified": "2026-10-20T14:13:59.757999+00:00",
      "x_ally_original_id": "evt:26c0ef67-509b-4480-961b-2c67c9f23f96",
      "name": "California report recorded"
    }
  ]
}