Herff Jones


Herff Jones is an American company that manufactures and sells educational recognition and achievement products and motivational materials, and has been in continuous operation since 1920. Herff Jones maintains production facilities across the United States as well as in Canada, and has a network of over 700 independent sales representatives.
The company and its subsidiaries have also been involved in top-level college football and professional sports, having manufactured the Heisman Trophy, and championship rings for the Indianapolis 500, the 2007 [Indianapolis Colts season|2007 Indianapolis Colts], and the San Antonio Spurs, as well as the medals for the 1960 Winter Olympics at Squaw Valley, [Placer County, California|Squaw Valley] among others.

History

In May 2021, Herff Jones was the victim of a cyber attack. As part of this breach, customers' usernames, passwords, and credit card information were stolen. In response, Herff Jones shut down the misconfigured server and encouraged customers to monitor their card account statements and credit reports for instances of unauthorized activity.
In December 2022, the Attorney General of New York began an investigation of the breach and issued an Assurance of Discontinuance. It stated that Herff Jones' information security program should include "risk assessment methods and risk assessment criteria must conform to an information security risk assessment method that is provided by information security bodies, ISO 27005, Duty of Care Risk Analysis Standard, or Center for Internet Security Risk Assessment Method,"