MalwareTechnologyRetail & ConsumerInformationRansomwareData EncryptedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountEmploymentMediumContained

Jameco Electronics

bd_e3ca073077128791 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 23, 2022

Filed

Jul 22, 2022

To disclose

13 weeks

Affected

Not disclosed

Linked

2 filings

Confidence

65%

Full breach record for Jameco Electronics →

Arndt Electronics d/b/a Jameco Electronics experienced a ransomware attack on April 23, 2022, compromising HR files of current and former employees. Affected data included names, addresses, SSNs, bank info, and driver's license numbers. The company disabled system access, engaged forensic investigators, notified the FBI, and offered 12 months of credit monitoring via Norton LifeLock.

J jump to incidentP pin to compareR raw source

California clockDiscovered Apr 23, 2022 → Notified Jul 14, 202282d ✗ CA 60-day late13 weeks discovery → filing

Incident timeline

discovery → filing · 13 weeks / 90 days

Apr 23, 2022

Begins

Apr 23, 2022

Discovered

Jul 22, 2022

Filed

vs. sector median

6 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteblack_bastabd_f6916118ded728b82022-05-02 · +81dCandidate

Name: Jameco Electronics
norm: jameco electronics
Domain: jameco.com

Name: Jameco Electronics
norm: jameco electronics
Domain: jameco.com
Also named: Arndt Electronicsdba oflegal entity
Jameco Electronicsdba oftrade name
Industry: TechnologyllmRetail & Consumerllm

Discovered: Apr 23, 2022
Breach occurred: Apr 23, 2022
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 14, 2022
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountEmployment
Data elements: Social Security numberDate of birth
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Notified the Federal Bureau of Investigation’s Internet Crime Complaint Center

During the incident: Disabled access to the system
Engaged a digital forensics firm to assist with the investigation
Notified the Federal Bureau of Investigation’s Internet Crime Complaint Center
Engaged Norton LifeLock to offer credit monitoring and related services
Changes made: Reviewing in-depth technical policies and procedures to make sure security strategies are in place to prevent future occurrence
Coordinating with a digital forensics firm, external IT specialists and consultants to conduct a root cause analysis and enhance the security of our IT footprint
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 weeks(90 days from discovery to filing)
Compliance flags: CA 60-day late · 82dLeak >30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Apr 23, 2022
→ Notified: Jul 14, 2022
82d 60 days (analyst band, pre-2026 discoveries) CA 60-day late

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Apr 23, 2022 → Notified: Jul 14, 2022	82d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-555525
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 22, 2022
Raw hash: 7ebbafd4f1ee0ffaa2f2bef02bacd30b26dc78a02e02bb114a2ed811869594e5

Linked disclosures

Ransomware claims (1)

Reporting entityJameco Electronics

Victim entityJameco Electronics

Incidentdiscovered Apr 23, 2022

Stated responseDisabled access to the system

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov