tonies GmbH — 2 prefixes (MA-L)

tonies GmbH holds two IEEE MA-L (24-bit OUI) block assignments — D4:59:44 and 98:9E:80 — both registered to the identical org name and registry address, Oststraße 119, Düsseldorf, NRW, DE 40210. This is the maker of the Toniebox, a cube-shaped, screen-free Wi-Fi audio player for children: an NFC/RFID figurine (a "Tonie") placed on top triggers playback, with content managed through a cloud backend and a companion mobile app. The company traces to Boxine GmbH, founded in Düsseldorf in 2013 by Patric Faßbender and Marcus Stahl, and went public in 2021 as Tonies SE; it reported more than 5.3 million Tonieboxes sold by mid-2023 and operates across roughly two dozen countries. Two separate OUI blocks are consistent with an active hardware manufacturer shipping successive device generations rather than a one-off registrant, and tonies runs a formal public vulnerability-disclosure program covering hardware, mobile apps, APIs, and web assets — further evidence of an ongoing engineering organization. For network classification, one of these globally-administered prefixes on a LAN reliably indicates a Toniebox (a consumer IoT device on a home Wi-Fi network), not enterprise networking gear. As with all IEEE OUI data, no assignment/registration date is published; third-party "registration date" values seen on lookup sites are database crawl artifacts, not IEEE facts, and are deliberately not recorded here.

IEEE assignment

2 prefixes → tonies GmbH, registered Düsseldorf, NRW, DE [Confirmed] — IEEE MA-L, corroborated by https://maclookup.app/vendors/tonies-gmbh

Registry / block size

both MA-L (24-bit OUI); no MA-M (the IEEE MA-M registry) or MA-S (the IEEE MA-S registry) blocks found for tonies GmbH [Confirmed] — the IEEE MA-L registry, the IEEE MA-M registry, the IEEE MA-S registry. NOTE: IEEE's public OUI data publishes NO assignment/registration date; any "date registered" on third-party tools is a database artifact, not an IEEE fact.

Verified prefixes (both MA-L, tonies GmbH)

D4:59:44, 98:9E:80 [Confirmed] — IEEE the IEEE MA-L registry / https://maclookup.app/vendors/tonies-gmbh

HQ / country

Oststraße 119, 40210 Düsseldorf, NRW, DE (registry address) [Confirmed] — IEEE MA-L

Company status

active; public company Tonies SE (legal predecessor Boxine GmbH, founded 2013 in Düsseldorf by Patric Faßbender and Marcus Stahl; IPO 2021) [Confirmed] — https://en.wikipedia.org/wiki/Tonies, https://ir.tonies.com/de/ueber-uns, https://www.northdata.com/tonies%20GmbH,%20D%C3%BCsseldorf/HRB%2071733

Device types

Toniebox — Wi-Fi/NFC screen-free children's audio player; paired Tonie figurines and companion mobile app; cloud content backend [Confirmed] — https://en.wikipedia.org/wiki/Tonies, https://support.tonies.com/hc/en-au/articles/29036634409106-Caution-for-routers-with-WEP-encryption

Notable products

Toniebox, Tonies (NFC figurines), Tonies app

Scale

>5.3 million Tonieboxes sold by mid-2023; operates in ~24 countries [Likely] — https://en.wikipedia.org/wiki/Tonies (single-source aggregate figure; drifts over time)

Security posture

public Vulnerability Disclosure Policy (scope: hardware, mobile apps, APIs, web apps; contact sec@boxine.de; rewards up to EUR 3,000 for critical findings); each Toniebox ships with an individual factory client certificate for cloud authentication

[Confirmed for VDP existence] — https://tonies.com/en-gb/vulnerability-disclosure-policy/

Security context

no mass-exploited CVE or major publicized breach of the Toniebox fleet surfaced in a light pass; independent researchers have published informal teardowns/known-issues trackers, and Mozilla Foundation's 2025 toy-security review covers the device. Treat "no major breach" as unverified-absence, not a clean bill. [Likely] — https://www.mozillafoundation.org/en/nothing-personal/toys-data-security-safety-report-2025/, https://medium.com/@paul.klingelhuber/first-quick-security-impressions-of-the-toniebox-d609656634ac, https://tonies-wiki.revvox.de/docs/wiki/general/known-problems/

Data trap

third-party lookup sites show "registration date" values (e.g. 2024-10-02 for D4:59:44, 2025-09-26 for 98:9E:80) — these are maclookup.app crawl/index timestamps, NOT IEEE-published assignment dates. Do not surface them as registration dates. [Confirmed] — https://maclookup.app/vendors/tonies-gmbh

Analyst note

one of these globally-administered prefixes on a LAN reliably identifies a Toniebox (home consumer IoT), not enterprise hardware; OUI alone confirms the vendor but not the specific model.