{
  "type": "bundle",
  "id": "bundle--fc2d29a9-922f-58dd-8877-d3d3c7005be4",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--1a002bd6-2fff-5c2d-8c7a-36662da88e08",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "org:8625759f-16e1-4a27-a5aa-a3744df0ee5c",
      "name": "University of Pennsylvania",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--4e9b98eb-6390-5e54-8cb0-5af53a8aa98f",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "brh:a70d393c-7400-410d-ab1c-e5d9052ed866",
      "name": "University of Pennsylvania development and alumni systems breach"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--7ad01add-4de8-57ea-8099-a2c5d924056d",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "inc:3b0de615-af91-4b93-b862-9925ec832b44",
      "name": "October 2025 Penn development and alumni systems incident"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--0e6b00ff-22b3-5448-85ad-957cc503619f",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "clm:f221de40-1353-44a1-886a-aed19e17e52f",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--db7dc76e-c535-560d-8f57-583651426961",
      "target_ref": "x-ally-data-category--ff2c8174-4feb-535f-8a4d-be23ee26eff2",
      "confidence": 90,
      "external_references": [
        {
          "source_name": "Have I Been Pwned",
          "url": "https://haveibeenpwned.com/api/v3/breach/UniversityOfPennsylvania",
          "external_id": "cit:7db2c4ee-67a1-4108-820d-7305c0c97ab3",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:c6f786aa32a1fbb5fed3798d238a2ec62964592f832d8976bb7a049ea0f67f31"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--43d3eaf7-f524-569d-8af3-e22a879b4a7d",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "clm:0560b4e6-6226-40cf-ae98-f59a6e2122ea",
      "relationship_type": "affected-organization",
      "source_ref": "incident--7ad01add-4de8-57ea-8099-a2c5d924056d",
      "target_ref": "identity--1a002bd6-2fff-5c2d-8c7a-36662da88e08",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "University of Pennsylvania Almanac",
          "url": "https://almanac.upenn.edu/articles/from-the-vice-president-of-information-technology-a-message-to-the-university-follow-up-to-the-cybersecurity-incident",
          "external_id": "cit:9980acf6-4b32-4c39-be79-396456ec3341",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:3eac5e641f9c0724fc2631f62d77f70acb34b2502c58c4d9476b3bcd975098d7"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--73f8868f-53d1-5957-868a-25f0686b9cc6",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "clm:d6a1fd28-1315-4c57-961b-33859f7340c0",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--db7dc76e-c535-560d-8f57-583651426961",
      "target_ref": "x-ally-data-category--40ba6c78-b66b-5dcd-8ee9-5f2789f80585",
      "confidence": 85,
      "external_references": [
        {
          "source_name": "Have I Been Pwned",
          "url": "https://haveibeenpwned.com/api/v3/breach/UniversityOfPennsylvania",
          "external_id": "cit:3b656b96-ef72-45e3-8002-222860e9ee5b",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:c6f786aa32a1fbb5fed3798d238a2ec62964592f832d8976bb7a049ea0f67f31"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--ebdf01bf-bb6f-5b4f-8023-eed10f1b4665",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "clm:a0a51254-bb1c-48f1-92ee-7d3e209789e2",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--db7dc76e-c535-560d-8f57-583651426961",
      "target_ref": "x-ally-data-category--c79f34f3-405d-57d2-8409-98eff3898231",
      "confidence": 90,
      "external_references": [
        {
          "source_name": "Have I Been Pwned",
          "url": "https://haveibeenpwned.com/api/v3/breach/UniversityOfPennsylvania",
          "external_id": "cit:25f5fd43-0d83-46a0-9a6a-7f2f449ac8e8",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:c6f786aa32a1fbb5fed3798d238a2ec62964592f832d8976bb7a049ea0f67f31"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--f53ecde7-5e71-5347-88f7-3acc59dc1ccb",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "clm:edcdb079-aeec-4cb5-bf41-8eee3da6e41c",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--db7dc76e-c535-560d-8f57-583651426961",
      "target_ref": "x-ally-data-category--a1530efd-ff4f-5bb2-8b21-9502991ef3f0",
      "confidence": 85,
      "external_references": [
        {
          "source_name": "Have I Been Pwned",
          "url": "https://haveibeenpwned.com/api/v3/breach/UniversityOfPennsylvania",
          "external_id": "cit:d42fd3d3-ee65-48d8-833f-374c32cd538b",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:c6f786aa32a1fbb5fed3798d238a2ec62964592f832d8976bb7a049ea0f67f31"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--f647edf0-c5c7-53dd-8c00-e0be94aa0dc9",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "clm:0ce87925-64a7-4697-bf28-420c3e5900e8",
      "relationship_type": "resulted-in",
      "source_ref": "incident--7ad01add-4de8-57ea-8099-a2c5d924056d",
      "target_ref": "x-ally-data-exposure--db7dc76e-c535-560d-8f57-583651426961",
      "confidence": 90,
      "external_references": [
        {
          "source_name": "Have I Been Pwned",
          "url": "https://haveibeenpwned.com/api/v3/breach/UniversityOfPennsylvania",
          "external_id": "cit:8ba5040a-0e47-43ee-97ed-f7cb8e826b9a",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:c6f786aa32a1fbb5fed3798d238a2ec62964592f832d8976bb7a049ea0f67f31"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--fc482985-c1de-5375-8ace-2afe1fbd3ce6",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "clm:223abc15-5041-452a-9588-17b146dfba76",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--db7dc76e-c535-560d-8f57-583651426961",
      "target_ref": "x-ally-data-category--a2b7dd9d-0c02-5710-88ed-ea507d0ffa07",
      "confidence": 90,
      "external_references": [
        {
          "source_name": "Have I Been Pwned",
          "url": "https://haveibeenpwned.com/api/v3/breach/UniversityOfPennsylvania",
          "external_id": "cit:a7a3d04c-ed27-4af4-81d5-0f269ad58344",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:c6f786aa32a1fbb5fed3798d238a2ec62964592f832d8976bb7a049ea0f67f31"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--13f56813-88c9-56ba-89e1-c23f1e1e3e05",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "clm:6194f727-eaf0-4750-81f2-30f7bda7ccd1",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "University of Pennsylvania Almanac",
          "url": "https://almanac.upenn.edu/articles/from-the-vice-president-of-information-technology-a-message-to-the-university-follow-up-to-the-cybersecurity-incident",
          "external_id": "cit:8761414c-b8b5-435d-b1f2-395c8de7d39e",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:3eac5e641f9c0724fc2631f62d77f70acb34b2502c58c4d9476b3bcd975098d7"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2025-11-04"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--3c0774d2-7681-5494-8951-3439fb5c751b",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "clm:5e638a13-3aab-43fb-b0e9-609a04433648",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "University of Pennsylvania Almanac",
          "url": "https://almanac.upenn.edu/articles/from-the-vice-president-of-information-technology-a-message-to-the-university-follow-up-to-the-cybersecurity-incident",
          "external_id": "cit:2a4e88ac-6ee9-462d-98ff-df21d0dbaa33",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:3eac5e641f9c0724fc2631f62d77f70acb34b2502c58c4d9476b3bcd975098d7"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Penn said a select group of information systems related to development and alumni activities was compromised through sophisticated identity impersonation, commonly known as social engineering."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--6063dabb-82b5-5b42-8403-d625760f59fc",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "clm:69035e54-8a9f-4dcc-b26a-9a5e7273174e",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Have I Been Pwned",
          "url": "https://haveibeenpwned.com/api/v3/breach/UniversityOfPennsylvania",
          "external_id": "cit:ab082ff5-2df5-4413-8c8f-523b6ebf4eb1",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:c6f786aa32a1fbb5fed3798d238a2ec62964592f832d8976bb7a049ea0f67f31"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "HIBP marked the University of Pennsylvania breach record verified and not fabricated."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--71f4db37-f2ca-56a3-890e-645b6b985a7f",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "clm:af9d331b-1310-4183-929d-29b8397af99d",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Have I Been Pwned",
          "url": "https://haveibeenpwned.com/api/v3/breach/UniversityOfPennsylvania",
          "external_id": "cit:3c7296c5-d079-4587-93b7-0e5c32ea223c",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:c6f786aa32a1fbb5fed3798d238a2ec62964592f832d8976bb7a049ea0f67f31"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "integer",
        "value": 623750,
        "unit": "record"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--a3af9324-eb2e-503a-8877-9298340e4e8e",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "clm:bf7dc91a-71af-4357-98e3-6073ba8c4d1b",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "University of Pennsylvania Almanac",
          "url": "https://almanac.upenn.edu/articles/from-the-vice-president-of-information-technology-a-message-to-the-university-follow-up-to-the-cybersecurity-incident",
          "external_id": "cit:14e56284-8683-426e-bd4e-b754b3700b5a",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:3eac5e641f9c0724fc2631f62d77f70acb34b2502c58c4d9476b3bcd975098d7"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Penn said staff prevented further unauthorized access, but not before an offensive and fraudulent email was sent to its community and the attacker took information."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--eb4ebe5a-532f-5aa3-84c1-6490772942a2",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "clm:b5267640-bb5a-440b-92b8-07ec1a74ef68",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "University of Pennsylvania Almanac",
          "url": "https://almanac.upenn.edu/articles/from-the-vice-president-of-information-technology-a-message-to-the-university-follow-up-to-the-cybersecurity-incident",
          "external_id": "cit:aff9f0bf-2de1-4100-936d-4b6fa0eb11ea",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:3eac5e641f9c0724fc2631f62d77f70acb34b2502c58c4d9476b3bcd975098d7"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Penn said all systems were restored and operational, it notified the FBI, and it was investigating with law enforcement and third-party cybersecurity professionals including CrowdStrike."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--f703d426-f75c-5b40-86c8-1ab857ce472d",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "clm:a87e4a74-4169-4afa-82a3-2413493bc5b0",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "University of Pennsylvania Almanac",
          "url": "https://almanac.upenn.edu/articles/from-the-vice-president-of-information-technology-a-message-to-the-university-follow-up-to-the-cybersecurity-incident",
          "external_id": "cit:c4cdf24b-f7a4-4bde-965a-264b5a75b4c0",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:3eac5e641f9c0724fc2631f62d77f70acb34b2502c58c4d9476b3bcd975098d7"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2025-10-31"
      }
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--40ba6c78-b66b-5dcd-8ee9-5f2789f80585",
      "created": "2026-08-09T01:29:00Z",
      "modified": "2026-08-09T01:29:00Z",
      "x_ally_original_id": "dat:41d26529-cba1-47c1-b528-25e4c18aedb2",
      "name": "Demographic information"
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--a1530efd-ff4f-5bb2-8b21-9502991ef3f0",
      "created": "2026-08-09T05:30:00Z",
      "modified": "2026-08-09T05:30:00Z",
      "x_ally_original_id": "dat:2658bacf-1fad-4801-94c6-7c1368c81a36",
      "name": "Credit and income information"
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--a2b7dd9d-0c02-5710-88ed-ea507d0ffa07",
      "created": "2026-08-08T23:12:00Z",
      "modified": "2026-08-08T23:12:00Z",
      "x_ally_original_id": "dat:559cf3f5-80c7-45ba-a930-ff0bfa8d17b0",
      "name": "Names"
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--c79f34f3-405d-57d2-8409-98eff3898231",
      "created": "2026-08-08T23:12:00Z",
      "modified": "2026-08-08T23:12:00Z",
      "x_ally_original_id": "dat:5abcee7e-4a37-494a-b6ba-87ff46149be9",
      "name": "Contact information"
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--ff2c8174-4feb-535f-8a4d-be23ee26eff2",
      "created": "2026-08-08T23:12:00Z",
      "modified": "2026-08-08T23:12:00Z",
      "x_ally_original_id": "dat:ad54319a-bb47-40fb-be6c-7fd6e2aa1f68",
      "name": "Dates of birth"
    },
    {
      "type": "x-ally-data-exposure",
      "spec_version": "2.1",
      "id": "x-ally-data-exposure--db7dc76e-c535-560d-8f57-583651426961",
      "created": "2026-08-09T09:23:25Z",
      "modified": "2026-08-09T09:23:25Z",
      "x_ally_original_id": "exp:ffcd2246-f100-4928-ba3b-fee90d7bb542",
      "name": "Penn donor and alumni data corpus"
    }
  ]
}