This standard is administered by the Payment Card Industry Security Standards Council to ensure cardholder data is processed in a secure environment. I thank Pennsylvania Attorney General Shapiro for his collaboration in this effort.”Ī multistate investigation discovered that Herff Jones was not in compliance with the Payment Card Industry Data Security Standard (“PCI DSS”) requirements. Companies have an obligation to prioritize their customers digital data safety and this agreement will require Herff Jones to strengthen its data security measures. “Consumers who bought class rings and other graduation tokens had their personal information end up in the wrong hands.
“Herff Jones turned milestones into mayhem for thousands of students whose personal information was stolen online because of poor data security measures,” said New York Attorney General Letitia James. The forensic investigation revealed that on December 15, 2020, an unknown hacker exploited a vulnerability in the company’s web servers that allowed them to steal customers’ payment card information and other personal information. Herff Jones was notified on April 7, 2021, by one of its payment processors that a number of cards tracing back to Herff Jones were found on three different websites known to sell stolen payment card data.
The terms of today’s settlement will help Herff Jones graduate to better protection of consumers’ personal information.” “Every corporation that does business in Pennsylvania needs to stay alert and protect their customer’s personal data or they will have to answer to my office in court. “Protecting Pennsylvanians’ personal information and financial data is a key priority of my office,” said AG Shapiro. Herff Jones will pay $100,000 each to both the Pennsylvania and New York Attorneys General Offices. The investigation conducted by Attorney General Shapiro, in conjunction with the New York Attorney General’s office, revealed that Herff Jones failed to properly employ reasonable data security measures in protecting consumers’ payment card information. HARRISBURG – Attorney General Josh Shapiro today announced a settlement with Herff Jones, LLC (“Herff Jones”) – producer and seller of yearbooks, class rings, caps and gowns, and other graduation memorabilia – after a data security event discovered in April 2021 exposed 30,295 Pennsylvania consumers’ payment card information. Herff Jones Agrees To Strengthen Its Network, Reform Its Data Security Practices, And Conduct Regular Assessments Of Its Computer Systems.
HERFF JONES LLC DATA BREACH REGISTRATION
Home Improvement Contractor Registration Home Improvement Contractor Registration.Home Improvement Contractor Registration.Voters’ Rights in Effect at the Polling Places on Election Days.Pennsylvania State Coroners’ Education Board.
0 kommentar(er)
