{
  "type": "bundle",
  "id": "bundle--a83d59ee-de26-5fcb-8091-5fba952537b0",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--ab56d20f-45a8-5e56-8f85-8a009a771640",
      "created": "2026-11-11T14:15:36.138719+00:00",
      "modified": "2026-11-11T14:15:36.138719+00:00",
      "x_ally_original_id": "org:db1a02d9-06b0-407e-8716-310fa0bfa7c2",
      "name": "York University",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--0e707f8a-1bf2-53a3-82c1-a5922003377e",
      "created": "2026-11-11T14:15:36.138719+00:00",
      "modified": "2026-11-11T14:15:36.138719+00:00",
      "x_ally_original_id": "inc:34719edd-0a58-4fe7-8308-ee4bec137a2d",
      "name": "York University departmental webforms theft"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--56b7c47a-5c0b-5fae-8cce-2bc7e6d573ff",
      "created": "2026-11-11T14:15:36.138719+00:00",
      "modified": "2026-11-11T14:15:36.138719+00:00",
      "x_ally_original_id": "brh:35945aa0-05b4-4e88-aa47-e5a58fe1f0bb",
      "name": "York University departmental webforms theft"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--0da1d601-67c3-524d-897a-0e121a060581",
      "created": "2026-11-11T14:15:36.138719+00:00",
      "modified": "2026-11-11T14:15:36.138719+00:00",
      "x_ally_original_id": "clm:df6f131a-9f30-448b-8a2b-8a34e1f2033f",
      "relationship_type": "resulted-in",
      "source_ref": "incident--0e707f8a-1bf2-53a3-82c1-a5922003377e",
      "target_ref": "x-ally-event--be8303c4-c3f5-557f-81d6-9f9c6e121232",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "York University",
          "url": "https://www.yorku.ca/uit/infosec/incident-faq/",
          "external_id": "cit:36bb6ff2-9b32-4def-ac61-134720611759",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e24bb2da31c217fed8b1b2ba798babfa2051be51aaf11dc86fa950053c3a17aa"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--8d5260c1-4126-536c-88ab-4bb9de8d8f31",
      "created": "2026-11-11T14:15:36.138719+00:00",
      "modified": "2026-11-11T14:15:36.138719+00:00",
      "x_ally_original_id": "clm:d71ac0a0-4480-43b6-b85f-ad3d72cba94f",
      "relationship_type": "resulted-in",
      "source_ref": "incident--0e707f8a-1bf2-53a3-82c1-a5922003377e",
      "target_ref": "x-ally-event--af5731a6-fb97-50d8-86f9-72490d4817ed",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "York University",
          "url": "https://www.yorku.ca/uit/infosec/incident-faq/",
          "external_id": "cit:e2417bda-3a4a-4005-a169-6dd809511688",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e24bb2da31c217fed8b1b2ba798babfa2051be51aaf11dc86fa950053c3a17aa"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--faad1c1e-ad07-576f-88ce-b1ff3563d4c1",
      "created": "2026-11-11T14:15:36.138719+00:00",
      "modified": "2026-11-11T14:15:36.138719+00:00",
      "x_ally_original_id": "clm:334c49b7-420b-42af-a595-05c8cc39e8aa",
      "relationship_type": "affected-organization",
      "source_ref": "incident--0e707f8a-1bf2-53a3-82c1-a5922003377e",
      "target_ref": "identity--ab56d20f-45a8-5e56-8f85-8a009a771640",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "York University",
          "url": "https://www.yorku.ca/uit/infosec/incident-faq/",
          "external_id": "cit:ba3376de-e0f9-4025-8b71-08371ca8ee64",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e24bb2da31c217fed8b1b2ba798babfa2051be51aaf11dc86fa950053c3a17aa"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--25802865-c3c0-5075-8a45-9efde8b97234",
      "created": "2026-11-11T14:15:36.138719+00:00",
      "modified": "2026-11-11T14:15:36.138719+00:00",
      "x_ally_original_id": "clm:3d0bf2ab-17d7-4ed0-b270-b01ec5547d36",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "York University",
          "url": "https://www.yorku.ca/uit/infosec/incident-faq/",
          "external_id": "cit:7bd439c5-b590-4420-b2b7-e16e39052fe2",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e24bb2da31c217fed8b1b2ba798babfa2051be51aaf11dc86fa950053c3a17aa"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Affected forms held records from department-specific starting years, the earliest 2007, through October 2026. This is a data-collection span, not an attacker-access duration. No affected-person total was disclosed."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--32111691-fe8a-5c85-8924-096788f9d08c",
      "created": "2026-11-11T14:15:36.138719+00:00",
      "modified": "2026-11-11T14:15:36.138719+00:00",
      "x_ally_original_id": "clm:b7534d91-d5b6-4f6c-9cad-3154dd0bb09f",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "York University",
          "url": "https://www.yorku.ca/uit/infosec/incident-faq/",
          "external_id": "cit:5710298a-7ff6-4692-8873-5348e074c547",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e24bb2da31c217fed8b1b2ba798babfa2051be51aaf11dc86fa950053c3a17aa"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "York contained the incident, engaged outside experts, improved web-form security and reported to law enforcement and Ontario’s privacy commissioner. It found no evidence of movement beyond affected systems; the cause remained under investigation."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--4f7010f2-ad67-5636-8d27-7dceaee8ed9b",
      "created": "2026-11-11T14:15:36.138719+00:00",
      "modified": "2026-11-11T14:15:36.138719+00:00",
      "x_ally_original_id": "clm:fe830bbe-989d-42aa-8ad0-00148492797f",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "York University",
          "url": "https://www.yorku.ca/uit/infosec/incident-faq/",
          "external_id": "cit:da98a3b7-c59b-4a32-9b34-32dcb93bc9ae",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e24bb2da31c217fed8b1b2ba798babfa2051be51aaf11dc86fa950053c3a17aa"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-11-06"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--63d67002-81c1-596c-887e-0d1eba5f24f8",
      "created": "2026-11-11T14:15:36.138719+00:00",
      "modified": "2026-11-11T14:15:36.138719+00:00",
      "x_ally_original_id": "clm:def556e2-4702-4604-99d8-3be342466276",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "York University",
          "url": "https://www.yorku.ca/uit/infosec/incident-faq/",
          "external_id": "cit:69e31231-307d-4ba1-a123-197b489bceba",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e24bb2da31c217fed8b1b2ba798babfa2051be51aaf11dc86fa950053c3a17aa"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "York University confirmed theft of personal information submitted through departmental online forms. Its investigation began after the incident came to its attention October 25."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--80ad0258-1886-539a-8072-de579b07d151",
      "created": "2026-11-11T14:15:36.138719+00:00",
      "modified": "2026-11-11T14:15:36.138719+00:00",
      "x_ally_original_id": "clm:7bc5b914-cb8f-469a-bc95-5a73baa7e62e",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "York University",
          "url": "https://www.yorku.ca/uit/infosec/incident-faq/",
          "external_id": "cit:3e010697-22ed-45d4-9152-985345e4edcc",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e24bb2da31c217fed8b1b2ba798babfa2051be51aaf11dc86fa950053c3a17aa"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Most stolen fields were contact details or York identifiers; depending on the form, records could also include academic, employment, financial-status, health, demographic or legal-background information. The full category list does not apply to every person."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--98771ecd-6e95-59b4-8a76-f2969da5ed11",
      "created": "2026-11-11T14:15:36.138719+00:00",
      "modified": "2026-11-11T14:15:36.138719+00:00",
      "x_ally_original_id": "clm:d94fc97e-2fd5-487a-ba48-df91877c382b",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "York University",
          "url": "https://www.yorku.ca/uit/infosec/incident-faq/",
          "external_id": "cit:d03afa11-10ad-413a-b990-6def7074a3bc",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e24bb2da31c217fed8b1b2ba798babfa2051be51aaf11dc86fa950053c3a17aa"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-25"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--d15112f2-7aca-5cea-8aec-c4252cfe4f1d",
      "created": "2026-11-11T14:15:36.138719+00:00",
      "modified": "2026-11-11T14:15:36.138719+00:00",
      "x_ally_original_id": "clm:53b01a15-659d-44e9-83ae-57c087317774",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "York University",
          "url": "https://www.yorku.ca/uit/infosec/incident-faq/",
          "external_id": "cit:539dac4b-bc5d-4c78-a1cd-17ee1079da89",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e24bb2da31c217fed8b1b2ba798babfa2051be51aaf11dc86fa950053c3a17aa"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "A smaller additional group with exposed government identifiers or financial-account information would receive direct notices and two years of credit monitoring and identity-theft protection."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--d272abcd-e475-5184-865a-06c158f68481",
      "created": "2026-11-11T14:15:36.138719+00:00",
      "modified": "2026-11-11T14:15:36.138719+00:00",
      "x_ally_original_id": "clm:379066d5-68ef-4a69-8bae-ebe0d329705f",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "York University",
          "url": "https://www.yorku.ca/uit/infosec/incident-faq/",
          "external_id": "cit:6e4515e8-c6b9-4e87-b6c0-ec0dd5583406",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e24bb2da31c217fed8b1b2ba798babfa2051be51aaf11dc86fa950053c3a17aa"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-25"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--f8feba39-5194-5e3d-8ef9-3772cf3a2fd0",
      "created": "2026-11-11T14:15:36.138719+00:00",
      "modified": "2026-11-11T14:15:36.138719+00:00",
      "x_ally_original_id": "clm:aa404dc1-8d6b-40f4-b6fe-7a9e1b501c8e",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "York University",
          "url": "https://www.yorku.ca/uit/infosec/incident-faq/",
          "external_id": "cit:55d6a22e-39c3-47fe-9c26-c4fc20008b08",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:e24bb2da31c217fed8b1b2ba798babfa2051be51aaf11dc86fa950053c3a17aa"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-11-06"
      }
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--af5731a6-fb97-50d8-86f9-72490d4817ed",
      "created": "2026-11-11T14:15:36.138719+00:00",
      "modified": "2026-11-11T14:15:36.138719+00:00",
      "x_ally_original_id": "evt:065a0330-f6b6-40e4-a084-d0cc844477c2",
      "name": "Public webforms notification published"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--be8303c4-c3f5-557f-81d6-9f9c6e121232",
      "created": "2026-11-11T14:15:36.138719+00:00",
      "modified": "2026-11-11T14:15:36.138719+00:00",
      "x_ally_original_id": "evt:17b95952-bf2b-4190-8234-030414fabf99",
      "name": "Incident comes to York’s attention"
    }
  ]
}