AccidentalMisconfigurationData ExfiltratedCustomer Data InvolvedPIIIDENTITY_BASICLowContained
MetaBrainz Foundation
bd_1608376468dbdef4 · schema v1 · pii pii-v1
Full breach record for MetaBrainz Foundation →MetaBrainz Foundation disclosed a data breach affecting MusicBrainz users between April 26, 2019, and November 22, 2020. User email addresses and dates of birth were exposed in the JSON source code of entity pages. The foundation fixed the code, audited their systems, and implemented new monitoring checks. No passwords were compromised.
California clockDiscovered Nov 22, 2020 → Notified Nov 22, 20200d ✓ CA 60-day OK9 days discovery → filing
⚠ notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-196624
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 1, 2020
- Raw hash
- f38a9ed0a3ba0df301cfb20c2977e22bc0aad11b3c997280a2b6e04e14d60744
Reporting entity
- Name
- MetaBrainz Foundationnorm: metabrainz foundation
- Domain
- metabrainz.org
Victim entity
- Name
- MetaBrainz Foundationnorm: metabrainz foundation
- Domain
- metabrainz.org
Incident
- Discovered
- Nov 22, 2020
- Materiality determined
- —
- Notification sent
- Nov 22, 2020
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Misconfiguration
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 9 days(9 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 0d
- Discovery-date grounding
- notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Nov 22, 2020→ Notified: Nov 22, 20200d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.