Tom James Company
ent_019e6169aefb7b22336956689731621d
Disclosures
5
State AG · 5 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
8,656
nationwide · State AG ME
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Tom James Company
- Normalized
- tom james— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 549300GN5IK1NHW8XS36
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (5)newest first
- Vermont State AGas victim2023-02-17
Tom James Company experienced a ransomware incident in August 2022. An unauthorized actor claimed to have accessed and/or acquired certain files. The investigation determined that names and Social Security numbers may have been affected. The company secured its network, reported to federal law enforcement, and is offering 12 months of credit monitoring through Experian.
- Maine State AGas victim2023-02-17
Tom James Company, a custom clothing retailer, experienced an external system breach (hacking) that occurred between July 28, 2022, and August 23, 2022. The breach was discovered on August 20, 2022. The incident affected 8,656 individuals in total, compromising names and Social Security numbers. Affected individuals were notified on February 17, 2023, and offered 12 months of credit monitoring and identity theft protection services through Experian.
- Indiana State AGas victim2023-02-17
Tom James Company reported a data breach to the Indiana Attorney General. The breach occurred on 2022-07-28 and was reported on 2023-02-17. 85 Indiana residents were affected. 8,656 individuals affected in total.
- Massachusetts State AGas victim2023-02-17
Tom James Company reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-02-17. 120 Massachusetts residents were affected. The report records the breach type as electronic.
- Montana State AGas victim2023-02-17
Tom James Company notified affected individuals in Montana and other states of a ransomware incident in August 2022. The attack encrypted systems and an unauthorized actor claimed to have accessed files containing names and Social Security numbers. The company reported the incident to federal law enforcement, offered 12 months of credit monitoring via Experian, and enhanced security policies.