UnknownTechnologyInformationCustomer Data InvolvedCredentialsIdentity (basic)LocationLowContained

Jambav

bd_863c7a6b7b60266e · schema v1 · pii pii-v1

Severity

Low

Discovered

Nov 11, 2019

Filed

Jan 10, 2020

To disclose

9 weeks

Affected

Not disclosed

Linked

9 filings

Confidence

66%

Full breach record for Jambav →2 incidents on file

Jambav, Inc. disclosed a data breach affecting its ToonDoo website on November 11, 2019. The incident exposed user email addresses, usernames, passwords, gender, and in some cases, IP addresses revealing geographic location. No financial information or Social Security numbers were involved. Jambav shut down the website, engaged forensic investigators, and notified the FBI.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 9 weeks / 60 days

Nov 11, 2019

Discovered

Jan 10, 2020

Filed

vs. sector median

10 wks faster

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Delaware State AGbd_959ac0a9d7c37b732020-01-02 · +8dVerified
South Carolina State AGbd_aea6f12827799fb72019-12-23 · +18dVerified
Massachusetts State AGbd_f15eb08cda29fbb12019-12-23 · +18dVerified
Montana State AGbd_d7544e14d61d83d62019-12-22 · +19dVerified

Show 4 more filings ↓up to 28d gap

Hawaii State AGbd_81e0f9550ab1cef82019-12-20 · +21dVerified
California State AGbd_eb98c9ae707ab1622019-12-19 · +22dCandidate
Oregon State AGbd_99023fc861bdb7672019-12-17 · +24dCandidate
Washington State AGbd_84a97823c016c2932019-12-13 · +28dVerified

Name: Jambav
norm: jambav
Domain: jambav.com

Name: Jambav
norm: jambav
Domain: jambav.com
Industry: Technologyllm

Discovered: Nov 11, 2019
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: CredentialsIdentity (basic)Location
Attack vector: Unknown
Regulator citations: Filed a complaint with the U.S. Federal Bureau of Investigation (FBI)

During the incident: Immediately shut down the Toondoo website
Engaged an independent forensics company to investigate the nature and extent of the breach
Filed a complaint with the U.S. Federal Bureau of Investigation (FBI)
Engaging with law enforcement authorities
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(60 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 8 states

View merged incident ↗

Washington State AGDec 13 · first

Oregon State AG+4d

California State AG+6d

Hawaii State AG+7d

Montana State AG+9d

South Carolina State AG+10d

Massachusetts State AG+10d

Delaware State AG+20d

California State AG+28d · this page

Pattern: first filing Dec 13 (WA), last Jan 10 (CA) — a 28-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-185811
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 10, 2020
Raw hash: 95d4c497032e74b72cf17ff2c854c8190327dae54d1fe7442a38d3d4cc83d864

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entityJambav

Victim entityJambav

Incidentdiscovered Nov 11, 2019

Stated responseImmediately shut down the Toondoo website

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov