

The attackers managed to place malware on the company’s servers that was then used to capture customer payment card information. On May 12, 2021, the company posted a red banner on the top of its homepage that read “HERFF JONES CYBER SECURITY INCIDENT UPDATE.” The company was the victim of a data breach that occurred between August 1, 2020, and April 30, 2021. “The University of Houston Campus Store is working directly with our graduates to make sure they have the latest information on the situation and to assist with any orders that may still be outstanding,” Stipes said.Herff Jones has been in business for over a century, selling graduation products such as caps and gowns, class rings and yearbooks to students and their parents to help mark their educational accomplishments. Herff Jones is currently investigating the issue and has disabled its payment functions. The situation is not unique to UH or UH System universities, it is impacting schools across Texas and the nation.” UHS will continue to monitor the situation and take additional actions as appropriate. “UH System Information Security has investigated and confirmed that the transactions do not involve any systems at any of the four universities within the UH System. “As a result, some customers have reported fraudulent credit card and bank activity,” Stipes said. The issue is not unique to the UH system, Stipes said, and is a nationwide situation. “The University of Houston is aware of a data breach that occurred on the website of Herff Jones, a vendor that provides caps, gowns and other commencement products to high school and college graduates,” said UH spokesperson Chris Stipes. The University is informed about the situation with Herff Jones and is monitoring it. On top of that, now there’s a data breach? And no one is notifying us? We wish that either UH or Herff Jones would notify us when it comes to our personal information being stolen.” “Graduation has been such a difficult process, which leaves a lot of us with unanswered questions. “I was very frustrated learning this,” Ochoa said. She’s has not heard back from UH about this issue. Ochoa’s account was frozen, and now she has no access to her money. “Either having frozen accounts or money being taken out of their accounts.” “This member shared these tweets in the chat and now many people on our campus are sharing that they are experiencing the same thing,” Ochoa continued. “One member of the group searched up ‘Herff Jones’ on Twitter and found many tweets from other students on different campuses talking about how there’s been a nationwide breach and money has been stolen from their accounts,” Ochoa said. She was a part of a group chat on GroupMe with other graduating seniors who were confused about the irregular bank activity. “Just a few days ago, I received an email and phone call from my bank stating that my card information was hacked, but no money was taken from my account.” “I ordered my cap and gown back in February or March,” Ochoa told the Cougar.
