{
  "type": "bundle",
  "id": "bundle--2095de58-252c-5a10-8d9b-f63d86281c7a",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--6192ea6d-4b60-5588-8ecc-746d956e7b14",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "org:7dd493a2-1ff7-5b30-baed-fba5d9a51d06",
      "name": "Uber",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--e1f4349e-a772-5a8c-8c17-c98aeb4517a3",
      "created": "2026-11-13T14:14:35.229358+00:00",
      "modified": "2026-11-13T14:14:35.229358+00:00",
      "x_ally_original_id": "brh:1ce54a0a-06dc-4e50-9b1c-3d4b2b2503ef",
      "name": "Uber service-provider account data incident"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--f9b20438-d7f0-5917-82cf-889c4eb59e78",
      "created": "2026-11-13T14:14:35.229358+00:00",
      "modified": "2026-11-13T14:14:35.229358+00:00",
      "x_ally_original_id": "inc:9de5a8c5-f24d-4de6-a321-07359781d8ec",
      "name": "Uber service-provider account data incident"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--146b0d18-1056-5122-8b64-98ed7a80e998",
      "created": "2026-11-13T14:14:35.229358+00:00",
      "modified": "2026-11-13T14:14:35.229358+00:00",
      "x_ally_original_id": "clm:4a386c0d-c3e3-4e53-9dd7-34b84ab97cf0",
      "relationship_type": "affected-organization",
      "source_ref": "incident--f9b20438-d7f0-5917-82cf-889c4eb59e78",
      "target_ref": "identity--6192ea6d-4b60-5588-8ecc-746d956e7b14",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Uber Technologies, Inc.",
          "url": "https://oag.ca.gov/system/files/Multistate%20Template%20-%20Final.pdf",
          "external_id": "cit:f6abef19-c23d-4080-81f8-0db47ab30946",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:3f3f9ec65f2dd19f389f5fbb42b7e40301372f7b3b27dcd47035ce4dc3c87911"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--3099c747-916d-539e-8766-ff9421924d32",
      "created": "2026-11-13T14:14:35.229358+00:00",
      "modified": "2026-11-13T14:14:35.229358+00:00",
      "x_ally_original_id": "clm:13f2b65e-4887-4bf7-b233-b06171eb9027",
      "relationship_type": "resulted-in",
      "source_ref": "incident--f9b20438-d7f0-5917-82cf-889c4eb59e78",
      "target_ref": "x-ally-event--51d78247-cf08-57f8-81f6-1764b0a4ea99",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Uber Technologies, Inc.",
          "url": "https://oag.ca.gov/system/files/Multistate%20Template%20-%20Final.pdf",
          "external_id": "cit:083a1b14-3f39-4338-998a-24e3b31fd226",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:3f3f9ec65f2dd19f389f5fbb42b7e40301372f7b3b27dcd47035ce4dc3c87911"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--42cfb330-4829-53a6-87a2-c14f50020174",
      "created": "2026-11-13T14:14:35.229358+00:00",
      "modified": "2026-11-13T14:14:35.229358+00:00",
      "x_ally_original_id": "clm:6957f0d6-43fc-45c1-9222-9232d2652e59",
      "relationship_type": "resulted-in",
      "source_ref": "incident--f9b20438-d7f0-5917-82cf-889c4eb59e78",
      "target_ref": "x-ally-event--89118e24-4afe-59b9-8074-c937fdae9060",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Uber Technologies, Inc.",
          "url": "https://oag.ca.gov/system/files/Multistate%20Template%20-%20Final.pdf",
          "external_id": "cit:68308c01-4f7a-46e1-a8eb-eb7f0d2b289b",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:3f3f9ec65f2dd19f389f5fbb42b7e40301372f7b3b27dcd47035ce4dc3c87911"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--ce3e83e8-7898-586d-826d-f312cb120267",
      "created": "2026-11-13T14:14:35.229358+00:00",
      "modified": "2026-11-13T14:14:35.229358+00:00",
      "x_ally_original_id": "clm:d008a9b3-271c-4781-bf42-ae7e451bd9bd",
      "relationship_type": "resulted-in",
      "source_ref": "incident--f9b20438-d7f0-5917-82cf-889c4eb59e78",
      "target_ref": "x-ally-event--2afea0f9-824d-539f-8bfd-e20380601b47",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Uber Technologies, Inc.",
          "url": "https://oag.ca.gov/system/files/Multistate%20Template%20-%20Final.pdf",
          "external_id": "cit:613a471a-8fd1-4cdd-a1b5-2174d653530a",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:3f3f9ec65f2dd19f389f5fbb42b7e40301372f7b3b27dcd47035ce4dc3c87911"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--29e62fa8-fcb4-5db0-805e-06ebde6b1ff1",
      "created": "2026-11-13T14:14:35.229358+00:00",
      "modified": "2026-11-13T14:14:35.229358+00:00",
      "x_ally_original_id": "clm:2c514160-6a21-443d-8429-0d37e502b9fd",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Uber Technologies, Inc.",
          "url": "https://oag.ca.gov/system/files/Multistate%20Template%20-%20Final.pdf",
          "external_id": "cit:5336dce7-a5a4-4991-8490-1f81bfd6707d",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:3f3f9ec65f2dd19f389f5fbb42b7e40301372f7b3b27dcd47035ce4dc3c87911"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-09"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--5f13908b-f6cc-541c-8d7d-2e40e21f243f",
      "created": "2026-11-13T14:14:35.229358+00:00",
      "modified": "2026-11-13T14:14:35.229358+00:00",
      "x_ally_original_id": "clm:5d993bc8-a304-4612-a8cb-0b7126332678",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Uber Technologies, Inc.",
          "url": "https://oag.ca.gov/system/files/Multistate%20Template%20-%20Final.pdf",
          "external_id": "cit:3ed3262a-79cf-4580-84f2-4062cfd2a97b",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:3f3f9ec65f2dd19f389f5fbb42b7e40301372f7b3b27dcd47035ce4dc3c87911"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "A service provider told Uber October 9 that an unauthorized third party had compromised the provider’s internal credentials and used them to access Uber’s account with that provider."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--84e7676a-e622-5402-8e7b-272b55c9a711",
      "created": "2026-11-13T14:14:35.229358+00:00",
      "modified": "2026-11-13T14:14:35.229358+00:00",
      "x_ally_original_id": "clm:d9f11d9f-8060-4989-b051-c0de3a19c8e7",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Uber Technologies, Inc.",
          "url": "https://oag.ca.gov/system/files/Multistate%20Template%20-%20Final.pdf",
          "external_id": "cit:eb97e3a7-7ff2-42c2-91e0-ee6b052d9405",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:3f3f9ec65f2dd19f389f5fbb42b7e40301372f7b3b27dcd47035ce4dc3c87911"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Uber determined October 13 that the actor accessed Uber data connected to the provider, including the notified individuals’ personal information. The public template leaves data categories unspecified and gives no total."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--9cff1012-066c-5b1c-8489-59e7b15d2162",
      "created": "2026-11-13T14:14:35.229358+00:00",
      "modified": "2026-11-13T14:14:35.229358+00:00",
      "x_ally_original_id": "clm:6af66e79-da1a-452e-8542-863467f9483b",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Uber Technologies, Inc.",
          "url": "https://oag.ca.gov/system/files/Multistate%20Template%20-%20Final.pdf",
          "external_id": "cit:29d6eb89-2443-4832-b88b-b586e4910b63",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:3f3f9ec65f2dd19f389f5fbb42b7e40301372f7b3b27dcd47035ce4dc3c87911"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-09"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--c55eac18-b1a2-5ecc-8c63-f71a9a8af880",
      "created": "2026-11-13T14:14:35.229358+00:00",
      "modified": "2026-11-13T14:14:35.229358+00:00",
      "x_ally_original_id": "clm:30fbc41f-d6c4-44f8-9033-bb857ed04167",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Uber Technologies, Inc.",
          "url": "https://oag.ca.gov/system/files/Multistate%20Template%20-%20Final.pdf",
          "external_id": "cit:665e3343-81cc-429b-9baa-b0239849192f",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:3f3f9ec65f2dd19f389f5fbb42b7e40301372f7b3b27dcd47035ce4dc3c87911"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-11-10"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--ca7041eb-66c1-559a-8978-b8a0a309dcaa",
      "created": "2026-11-13T14:14:35.229358+00:00",
      "modified": "2026-11-13T14:14:35.229358+00:00",
      "x_ally_original_id": "clm:f6847140-de42-4e41-9690-54b0b4c82305",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Uber Technologies, Inc.",
          "url": "https://oag.ca.gov/system/files/Multistate%20Template%20-%20Final.pdf",
          "external_id": "cit:4255210e-355b-4eaf-a7e0-6a247347587d",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:3f3f9ec65f2dd19f389f5fbb42b7e40301372f7b3b27dcd47035ce4dc3c87911"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Uber offered credit monitoring and fraud assistance and said it had not identified data misuse as of its November 10 letter. The template does not state a monitoring duration."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--cf9468a3-82b9-5bd8-8d72-c2e95759c016",
      "created": "2026-11-13T14:14:35.229358+00:00",
      "modified": "2026-11-13T14:14:35.229358+00:00",
      "x_ally_original_id": "clm:d0e516ce-7e7a-4bec-89b6-17f664dd4a68",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Uber Technologies, Inc.",
          "url": "https://oag.ca.gov/system/files/Multistate%20Template%20-%20Final.pdf",
          "external_id": "cit:a4a5473e-6b02-4a49-84a3-34f5d538e741",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:3f3f9ec65f2dd19f389f5fbb42b7e40301372f7b3b27dcd47035ce4dc3c87911"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-13"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--d7c3cdf1-aad5-56e3-82d4-19cbb4abe789",
      "created": "2026-11-13T14:14:35.229358+00:00",
      "modified": "2026-11-13T14:14:35.229358+00:00",
      "x_ally_original_id": "clm:aca38295-0c3c-425a-9ee1-57f34f4b580b",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Uber Technologies, Inc.",
          "url": "https://oag.ca.gov/system/files/Multistate%20Template%20-%20Final.pdf",
          "external_id": "cit:f1cc9b0a-c57c-4915-b287-2117963ea6de",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:3f3f9ec65f2dd19f389f5fbb42b7e40301372f7b3b27dcd47035ce4dc3c87911"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Uber severed its data connections with the provider immediately after notification and investigated the incident."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--e7992a59-ff94-589f-8421-cb8e4b67498d",
      "created": "2026-11-13T14:14:35.229358+00:00",
      "modified": "2026-11-13T14:14:35.229358+00:00",
      "x_ally_original_id": "clm:8c16783c-d05b-45e8-80e6-690c93e99d61",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Uber Technologies, Inc.",
          "url": "https://oag.ca.gov/system/files/Multistate%20Template%20-%20Final.pdf",
          "external_id": "cit:4d13a1da-41d6-4079-9b9a-427a4e4c085d",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:3f3f9ec65f2dd19f389f5fbb42b7e40301372f7b3b27dcd47035ce4dc3c87911"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-11-10"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--f6e85b04-a55a-59eb-8567-209bcb8191e3",
      "created": "2026-11-13T14:14:35.229358+00:00",
      "modified": "2026-11-13T14:14:35.229358+00:00",
      "x_ally_original_id": "clm:3c1dae98-de95-4db0-bf56-f08d525f46bb",
      "confidence": 100,
      "external_references": [],
      "x_ally_claim_object": {
        "kind": "iri",
        "value": "https://attack.mitre.org/techniques/T1078/"
      }
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--2afea0f9-824d-539f-8bfd-e20380601b47",
      "created": "2026-11-13T14:14:35.229358+00:00",
      "modified": "2026-11-13T14:14:35.229358+00:00",
      "x_ally_original_id": "evt:5063a2d1-5494-474f-8c0e-5dc141dd3114",
      "name": "Uber data access confirmed"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--51d78247-cf08-57f8-81f6-1764b0a4ea99",
      "created": "2026-11-13T14:14:35.229358+00:00",
      "modified": "2026-11-13T14:14:35.229358+00:00",
      "x_ally_original_id": "evt:27e77a3a-00d1-4540-aaf1-ffede8b16008",
      "name": "Provider alerts Uber; connections severed"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--89118e24-4afe-59b9-8074-c937fdae9060",
      "created": "2026-11-13T14:14:35.229358+00:00",
      "modified": "2026-11-13T14:14:35.229358+00:00",
      "x_ally_original_id": "evt:05cda28a-6dd6-4924-a457-15924616a7d5",
      "name": "Personal-data notices issued"
    }
  ]
}