Herff Jones, Inc.

Herff Jones LLC, a student photography retailer, disclosed a data breach on April 7, 2021, involving unauthorized access to customer payment card information. The incident may have also exposed names, addresses, phone numbers, and email addresses. Herff Jones notified law enforcement, engaged a cybersecurity firm, and terminated unauthorized access. Affected customers were offered one year of free credit monitoring and identity theft insurance.

Herff Jones, LLC notified customers of a data security incident discovered on April 7, 2021, involving unauthorized access to payment card information and customer PII (name, address, phone, email). The company engaged law enforcement and a cybersecurity firm, terminated unauthorized access, and partnered with PayPal for new payment processing. Affected customers received one year of free credit monitoring via Equifax.

Herff Jones, LLC reported a data breach affecting customer payment card information and PII. The incident was discovered on April 7, 2021, involving unauthorized access to payment systems. Herff Jones engaged a cybersecurity firm, notified law enforcement, and offered one year of credit monitoring to affected individuals.

Herff Jones, LLC reported a data breach to the Oregon Attorney General. The breach was reported on 2021-06-16. The breach occurred during 1/11/2021 - 4/19/2021. The breach was discovered on 5/25/2021. Notice was sent on 6/15/2021.

Herff Jones, LLC reported an external system breach (hacking) occurring between January 11, 2021, and April 19, 2021, discovered on May 25, 2021. The incident affected approximately 1,091,049 individuals nationwide, including 315 Maine residents. Acquired data included names and financial account or credit/debit card numbers. Herff Jones notified consumers in writing and provided one year of credit monitoring through Equifax.

Affected (this filing): 1,091,049

Herff Jones, LLC, a business sector entity reported a malware incident to the Washington Attorney General. The organization became aware of the incident on 2021-04-07 and filed notice on 2021-06-18. 17,316 Washington residents were affected. 72 days elapsed between awareness and notification. 234 days to identify the breach. 22 days to contain the breach.

Affected (this filing): 17,316

Herff Jones, LLC reported a data breach to the Hawaii Office of Consumer Protection. The office was notified on 2021/06.18. Breach type: Hackers/Unauthorized Access. 3,373 Hawaii residents were affected. Recovered from the Internet Archive after the notice was removed from the OCP table.