MalwareProfessional ServicesProfessional ServicesMalware OtherMedium
Herff Jones, Inc.
bd_5f73094a967c585a · schema v1 · pii pii-v1
Full breach record for Herff Jones, Inc. →Herff Jones, LLC, a business sector entity reported a malware incident to the Washington Attorney General. The organization became aware of the incident on 2021-04-07 and filed notice on 2021-06-18. 17,316 Washington residents were affected. 72 days elapsed between awareness and notification. 234 days to identify the breach. 22 days to contain the breach.
Washington clock⏱ WA AG >30d10 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 8 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (7) · sorted by filing gap
- bd_74f29caa55e60387Hawaii State AGfiled 2021-06-18Verified
- bd_c498cc7962b75b4eMaine State AGfiled 2021-06-17(1d gap)Verified
- bd_2e90ae60839167cfCalifornia State AGfiled 2021-06-16(2d gap)Verified
- bd_c3551e4927f858b9Oregon State AGfiled 2021-06-16(2d gap)Verified
Show 3 more filings ↓Show fewer ↑up to 3d gap
- bd_29c004d8b0b0569aMontana State AGfiled 2021-06-15(3d gap)Candidate
- bd_b365bf4fbdc559d8Delaware State AGfiled 2021-06-15(3d gap)Verified
- bd_d19b69aaa264a9e5Delaware State AGfiled 2021-06-15(3d gap)Verified
Source provenance
- Source URL
- https://data.wa.gov/resource/sb4j-ca4h.json?id=10485
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 18, 2021
- Raw hash
- 4479dace56906f2065f5768e8aa3e19874b5a05932a0af8e2055874880f62e6f
Reporting entity
- Name
- Herff Jones, Inc.norm: herff jones
Victim entity
- Name
- Herff Jones, Inc.norm: herff jones
- Industry
- Professional Servicesllm
Incident
- Discovered
- Apr 7, 2021
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- 17,316
- Data types
- —
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 10 weeks(72 days from discovery to filing)
- Compliance flags
- WA AG >30d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.