AccidentalTechnologyInformationMisdeliveryEmployee Data InvolvedIdentity (basic)Government IDMediumResolved

Ziff Davis

bd_b9246e609c457ce9 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 3, 2026

Filed

Apr 3, 2026

To disclose

4 weeks

Affected

124state residents only

Confidence

65%

Full breach record for Ziff Davis →

Ziff Davis, Inc. disclosed that on February 25, 2026, its accounts payable team inadvertently sent an internal spreadsheet containing names and date elements to an external recipient. The recipient self-reported the incident to Ziff Davis on March 3, 2026, and confirmed deletion of the data. Ziff Davis is offering 24 months of identity monitoring services to affected individuals.

J jump to incidentP pin to compareR raw source

Massachusetts clock⏱ MA AG >30d4 weeks discovery → filing

Incident timeline

undetected · 6 days

discovery → filing · 4 weeks / 31 days

Feb 25, 2026

Begins

Mar 3, 2026

Discovered

Apr 3, 2026

Filed

vs. sector median

6 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed124 affectedView incident

Name: Ziff Davis
norm: ziff davis
Domain: ziffdavis.com

Name: Ziff Davis
norm: ziff davis
Domain: ziffdavis.com
Industry: Technologyllm

Discovered: Mar 3, 2026
Breach occurred: Feb 25, 2026
Undetected for: 6 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 124state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unknown

During the incident: Arranged for 24 months of identity monitoring and identity theft restoration service from Kroll, LLC
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 4 weeks(31 days from discovery to filing)
Compliance flags: MA AG >30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-520-ziff-davis-inc/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 3, 2026
Raw hash: 51d94371a725a23ed6ea1945c04aa50278a4b40f69d67b4a076065edb96df1bd

Reporting entityZiff Davis

Victim entityZiff Davis

Incidentdiscovered Mar 3, 2026

Stated responseArranged for 24 months of identity monitoring and identity theft restoration service from Kroll, LLC

ComplianceMA AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov