The complaint guesses that the data breach may have been done via scraping or skimming data entered on the website. The complaint, which was filed on May 27, 2021, alleges, “As of this writing, Herff Jones has not yet provided notice to state attorneys general, to the public via press release, or to customers and lesees via email or physical mail, leaving many customers in the dark as to the vulnerability of their data.” While the company has confirmed that it experienced a data breach, it has not yet provided details about it. The complaint adds to this an accusation: “All of this personally identifiable information was compromised due to negligent and/or careless acts and omissions and the failure to protect customers’ data.” Herff Jones’ customers face a lifetime risk of identity theft.” Because of Data Breach, customers’ PII is still available on the dark web for criminals to access and abuse. Hackers accessed and then offered for sale the unencrypted, unredacted, stolen PII to criminals. The complaint alleges, “That means the Data Breach worked. Students can only do business with the company their school has chosen.Īccording to the complaint, hackers were able to steal the students PII, including names and payment cards.
Schools contract with Herff Jones for the rental of “regalia” for graduation. The complaint claims that students at the University of Houston, Purdue University, the University of Illinois and Urbana-Champaign, the State University of New York at Binghamton, and other schools had reported that their PII had been stolen. By May 12, the complaint says that news organizations began reporting that the company had suffered a data breach which exposed customers’ personally identifiable information (PII), resulting in fraudulent charges on their payment cards. Subclasses have also been defined for individuals living in California, Indiana, and New York.Īround May 5, 2020, graduating students posting on Reddit claimed they had found fraudulent charges on their debit and credit cards, after renting caps and gowns from Herff Jones. The Nationwide Class for this action is all individuals whose PII was compromised in the data breach that is the subject of this complaint. The complaint alleges, “These rentals were the only common charges that all students had in common.” The complaint for this class action alleges that the company had a data breach, claiming that a number of students who rented caps and gowns for their graduations from Herff Jones suffered fraudulent credit and debit card charges on their cards.
The team is available by calling 85 between 8am and 8pm Central time, Monday through Friday.Herff Jones sells class rings and rents other items related to graduation, such as caps and gowns. One lawsuit states that the data breach affected college students in at least 14 states, including.
HERFF JONES DATA BREACH SERIES
In the meantime, Herff Jones has a customer service team that is dedicated to answering questions for customers on this issue. In a series of three separate lawsuits filed in late May, college students and their families allege that Herff Jones did not do enough to protect their information and failed to inform affected customers in a timely manner after the cyber attack. Once they have this information, the company will contact each individual directly.
Herff Jones is in the process of identifying which individuals were affected by this data breach. Herff Jones Data Breach Saw a Twitter post of UH students claiming their card info was stolen as of late, and found another post here about students nationwide having the same issue. Herff Jones is investigating and has taken immediate action to temporarily disable its payment functions, however, students are still able to place orders without submitting payment at this time. As of May 12, 2021, Herff Jones has a red banner posted near the top of the homepage of its website, HERFF titled JONES CYBER SECURITY INCIDENT UPDATE. The situation is not unique to UH or UH System universities, it is impacting schools across Texas and the nation. Since the Data Breach, Herff Jones communicated that it was investigating the Data Breach and might have updates at a later point. UHS will continue to monitor the situation and take additional actions as appropriate. As a result, some customers have reported fraudulent credit card and bank activity. UH System Information Security has investigated and confirmed that the transactions do not involve any systems at any of the four universities within the UH System. The University of Houston is aware of a data breach that occurred on the website of Herff Jones, a vendor that provides caps, gowns and other commencement products to high school and college graduates.
0 kommentar(er)
