HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedPCIFINANCIAL_ACCOUNTIDENTITY_BASICLowContained
Herff Jones, Inc.
bd_b365bf4fbdc559d8 · schema v1 · pii pii-v1
Full breach record for Herff Jones, Inc. →Herff Jones LLC, a student photography retailer, disclosed a data breach on April 7, 2021, involving unauthorized access to customer payment card information. The incident may have also exposed names, addresses, phone numbers, and email addresses. Herff Jones notified law enforcement, engaged a cybersecurity firm, and terminated unauthorized access. Affected customers were offered one year of free credit monitoring and identity theft insurance.
This filing is one of 8 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (7) · sorted by filing gap
- bd_29c004d8b0b0569aMontana State AGfiled 2021-06-15Candidate
- bd_d19b69aaa264a9e5Delaware State AGfiled 2021-06-15Verified
- bd_2e90ae60839167cfCalifornia State AGfiled 2021-06-16(1d gap)Verified
- bd_c3551e4927f858b9Oregon State AGfiled 2021-06-16(1d gap)Verified
Show 3 more filings ↓Show fewer ↑up to 3d gap
- bd_c498cc7962b75b4eMaine State AGfiled 2021-06-17(2d gap)Verified
- bd_5f73094a967c585aWashington State AGfiled 2021-06-18(3d gap)Verified
- bd_74f29caa55e60387Hawaii State AGfiled 2021-06-18(3d gap)Verified
Source provenance
- Source URL
- https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2021/06/Consumer-Notice.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 15, 2021
- Raw hash
- c53a13d781a0cdd14c53ac4d1ba1457aeb183fd056af1cbbb80ca48444e59da2
Reporting entity
- Name
- Herff Jones, Inc.norm: herff jones
Victim entity
- Name
- Herff Jones, Inc.norm: herff jones
Incident
- Discovered
- Apr 7, 2021
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PCIFINANCIAL_ACCOUNTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1119 Automated Collection
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 10 weeks(69 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.