{
  "type": "bundle",
  "id": "bundle--2c807835-1673-567e-8fc3-207be02d74a2",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--63120f3b-f6b9-535f-85b0-3bb820eb1a5e",
      "created": "2026-10-30T14:22:20.444045+00:00",
      "modified": "2026-10-30T14:22:20.444045+00:00",
      "x_ally_original_id": "org:208418a7-a04c-4ecd-a6a7-112dc08597b4",
      "name": "Troutman Pepper Locke LLP",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--4ae96783-4907-5634-8680-86218c4d49da",
      "created": "2026-10-30T14:22:20.444045+00:00",
      "modified": "2026-10-30T14:22:20.444045+00:00",
      "x_ally_original_id": "inc:3f498c6a-30d8-433c-806c-14c819d958bf",
      "name": "Troutman Pepper Locke document-disclosure incident"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--a925e292-6075-5e1b-8a85-155a3ff0e375",
      "created": "2026-10-30T14:22:20.444045+00:00",
      "modified": "2026-10-30T14:22:20.444045+00:00",
      "x_ally_original_id": "brh:a2fe97c6-a1d7-490c-b1b6-b35cc31a08fa",
      "name": "Troutman Pepper Locke document-disclosure incident"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--0afb25a6-08f3-57a5-8799-f6898bd6723f",
      "created": "2026-10-30T14:22:20.444045+00:00",
      "modified": "2026-10-30T14:22:20.444045+00:00",
      "x_ally_original_id": "clm:b5c1b9b2-755d-4908-8895-6caa7f06ccd5",
      "relationship_type": "affected-organization",
      "source_ref": "incident--4ae96783-4907-5634-8680-86218c4d49da",
      "target_ref": "identity--63120f3b-f6b9-535f-85b0-3bb820eb1a5e",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Troutman Pepper Locke LLP",
          "url": "https://oag.ca.gov/system/files/Troutman%20-%20California%20Notification.pdf",
          "external_id": "cit:37052947-d351-47e1-be45-8362b79e5984",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5d84e69fb08db439fc48616f3821dda008459f92e39d89aea2cb761ed12382cc"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--81580037-41d5-550a-8de6-6ab666570924",
      "created": "2026-10-30T14:22:20.444045+00:00",
      "modified": "2026-10-30T14:22:20.444045+00:00",
      "x_ally_original_id": "clm:921082c1-a912-4093-9f08-7d07d6364425",
      "relationship_type": "resulted-in",
      "source_ref": "incident--4ae96783-4907-5634-8680-86218c4d49da",
      "target_ref": "x-ally-event--c607adcc-f28f-574b-8007-215176f44cf7",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Troutman Pepper Locke LLP",
          "url": "https://oag.ca.gov/system/files/Troutman%20-%20California%20Notification.pdf",
          "external_id": "cit:4db0a4a9-cca6-4a2c-b49b-01cfc6dceae7",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5d84e69fb08db439fc48616f3821dda008459f92e39d89aea2cb761ed12382cc"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--2059429d-0e1c-5b80-8693-ad9a30a670ba",
      "created": "2026-10-30T14:22:20.444045+00:00",
      "modified": "2026-10-30T14:22:20.444045+00:00",
      "x_ally_original_id": "clm:2e4f5ea6-4f34-47a6-a6bb-e213229a0277",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Troutman Pepper Locke LLP",
          "url": "https://oag.ca.gov/system/files/Troutman%20-%20California%20Notification.pdf",
          "external_id": "cit:427a72a8-f891-464d-916b-c1c6ba1136ad",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5d84e69fb08db439fc48616f3821dda008459f92e39d89aea2cb761ed12382cc"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-08-07"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--342947ab-c802-5448-8288-37a05c23ad2c",
      "created": "2026-10-30T14:22:20.444045+00:00",
      "modified": "2026-10-30T14:22:20.444045+00:00",
      "x_ally_original_id": "clm:44be5744-f56c-4b7e-8a49-e3deafbd9b5e",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Troutman Pepper Locke LLP",
          "url": "https://oag.ca.gov/system/files/Troutman%20-%20California%20Notification.pdf",
          "external_id": "cit:6e22c89b-ad45-4d9d-99c4-83e27245db47",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5d84e69fb08db439fc48616f3821dda008459f92e39d89aea2cb761ed12382cc"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Troutman investigated with cybersecurity specialists, notified the FBI and offered affected recipients 24 months of credit monitoring and identity protection."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--5860c407-9c0e-54f4-8a51-6b63a592ca46",
      "created": "2026-10-30T14:22:20.444045+00:00",
      "modified": "2026-10-30T14:22:20.444045+00:00",
      "x_ally_original_id": "clm:d0aff36c-3e7a-4db9-aa1c-68676f140165",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Troutman Pepper Locke LLP",
          "url": "https://oag.ca.gov/system/files/Troutman%20-%20California%20Notification.pdf",
          "external_id": "cit:86dcb4d0-b4ac-4b15-821a-18f5864a2d4f",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5d84e69fb08db439fc48616f3821dda008459f92e39d89aea2cb761ed12382cc"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "On August 7, 2026, a Troutman Pepper Locke employee was deceived by apparently legitimate communications and sent documents to an unauthorized recipient. The employee reported the suspicious interaction to the security team."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--6a21564a-0f6e-5c60-8ba3-ff2330ed0925",
      "created": "2026-10-30T14:22:20.444045+00:00",
      "modified": "2026-10-30T14:22:20.444045+00:00",
      "x_ally_original_id": "clm:e392b860-b6d0-4f0c-8e00-5eca9f04fc41",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Troutman Pepper Locke LLP",
          "url": "https://oag.ca.gov/system/files/Troutman%20-%20California%20Notification.pdf",
          "external_id": "cit:527cc006-45bf-42d0-88fb-a35d79d39a18",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5d84e69fb08db439fc48616f3821dda008459f92e39d89aea2cb761ed12382cc"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The documents contained personal information obtained for legal work. The public template identifies names but leaves other recipient-specific fields unspecified. Troutman said its operations were unaffected and the recipient did not gain access to its systems."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--9d8a1ed1-1def-5b26-819e-718a11690e7f",
      "created": "2026-10-30T14:22:20.444045+00:00",
      "modified": "2026-10-30T14:22:20.444045+00:00",
      "x_ally_original_id": "clm:6ff83ccc-d735-4a4c-8ede-cb0474c1877c",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Troutman Pepper Locke LLP",
          "url": "https://oag.ca.gov/system/files/Troutman%20-%20California%20Notification.pdf",
          "external_id": "cit:1bcf4530-ae58-463b-ae05-770bddf022f8",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5d84e69fb08db439fc48616f3821dda008459f92e39d89aea2cb761ed12382cc"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The firm describes social engineering that induced a document transfer. It does not establish compromised credentials, malware or a specific communication channel."
      }
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--c607adcc-f28f-574b-8007-215176f44cf7",
      "created": "2026-10-30T14:22:20.444045+00:00",
      "modified": "2026-10-30T14:22:20.444045+00:00",
      "x_ally_original_id": "evt:9fe524b3-48de-4fb5-9f0e-6677738808a3",
      "name": "Employee deceived into document transfer"
    }
  ]
}
