HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedPCIFINANCIAL_ACCOUNTIDENTITY_BASICLowContained
Herff Jones, Inc.
bd_d19b69aaa264a9e5 · schema v1 · pii pii-v1
Full breach record for Herff Jones, Inc. →Herff Jones, LLC notified customers of a data security incident discovered on April 7, 2021, involving unauthorized access to payment card information and customer PII (name, address, phone, email). The company engaged law enforcement and a cybersecurity firm, terminated unauthorized access, and partnered with PayPal for new payment processing. Affected customers received one year of free credit monitoring via Equifax.
This filing is one of 8 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (7) · sorted by filing gap
- bd_29c004d8b0b0569aMontana State AGfiled 2021-06-15Candidate
- bd_b365bf4fbdc559d8Delaware State AGfiled 2021-06-15Verified
- bd_2e90ae60839167cfCalifornia State AGfiled 2021-06-16(1d gap)Verified
- bd_c3551e4927f858b9Oregon State AGfiled 2021-06-16(1d gap)Verified
Show 3 more filings ↓Show fewer ↑up to 3d gap
- bd_c498cc7962b75b4eMaine State AGfiled 2021-06-17(2d gap)Verified
- bd_5f73094a967c585aWashington State AGfiled 2021-06-18(3d gap)Verified
- bd_74f29caa55e60387Hawaii State AGfiled 2021-06-18(3d gap)Verified
Source provenance
- Source URL
- https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2021/06/Consumer-Notice.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 15, 2021
- Raw hash
- ec23860920992dfb990fec24a7bb6ed08d23cde2ac477acf2b1346198591d8c9
Reporting entity
- Name
- Herff Jones, Inc.norm: herff jones
Victim entity
- Name
- Herff Jones, Inc.norm: herff jones
Incident
- Discovered
- Apr 7, 2021
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PCIFINANCIAL_ACCOUNTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- notified law enforcement
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 10 weeks(69 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.