HackingVulnerability ExploitData ExfiltratedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTHighContained
Herff Jones, Inc.
bd_c498cc7962b75b4e · schema v1 · pii pii-v1
Full breach record for Herff Jones, Inc. →Herff Jones, LLC reported an external system breach (hacking) occurring between January 11, 2021, and April 19, 2021, discovered on May 25, 2021. The incident affected approximately 1,091,049 individuals nationwide, including 315 Maine residents. Acquired data included names and financial account or credit/debit card numbers. Herff Jones notified consumers in writing and provided one year of credit monitoring through Equifax.
Maine clockDiscovered May 25, 2021 → Filed with AG Jun 17, 202123d ✓ ME AG ≤30d23 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 8 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (7) · sorted by filing gap
- bd_5f73094a967c585aWashington State AGfiled 2021-06-18(1d gap)Verified
- bd_74f29caa55e60387Hawaii State AGfiled 2021-06-18(1d gap)Verified
- bd_2e90ae60839167cfCalifornia State AGfiled 2021-06-16(1d gap)Verified
- bd_c3551e4927f858b9Oregon State AGfiled 2021-06-16(1d gap)Verified
Show 3 more filings ↓Show fewer ↑up to 2d gap
- bd_29c004d8b0b0569aMontana State AGfiled 2021-06-15(2d gap)Candidate
- bd_b365bf4fbdc559d8Delaware State AGfiled 2021-06-15(2d gap)Verified
- bd_d19b69aaa264a9e5Delaware State AGfiled 2021-06-15(2d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/bd38099e-3574-4e67-a208-535e984ec8cd.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 17, 2021
- Raw hash
- 4896f7828eb6a43ad3233309c2b0b8a9dd697364fb3d282622b7ae790227d304
Reporting entity
- Name
- Herff Jones, Inc.norm: herff jones
Victim entity
- Name
- Herff Jones, Inc.norm: herff jones
Incident
- Discovered
- May 25, 2021
- Materiality determined
- —
- Notification sent
- Jun 15, 2021
- Affected individuals
- 1,091,049
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 23 days(23 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 23d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 25, 2021→ Filed with AG: Jun 17, 202123d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.