Just For Men

The Maine Office of the Attorney General disclosed a data breach affecting Just For Men, attributed to external system hacking. The incident, which occurred on November 22, 2019, was reported over a year later on November 4, 2020. The breach compromised sensitive financial data of 1,439 individuals, including 5 Maine residents. The exposed information included financial account numbers, credit/debit card details, security codes, and other access credentials, posing a significant risk of fraud and financial exploitation. While the exact method of the hack remains undisclosed, the breach highlights vulnerabilities in the company’s cybersecurity defenses, leading to unauthorized access to critical customer payment data. The delayed disclosure further raises concerns about transparency and incident response protocols. Affected individuals faced potential risks such as unauthorized transactions, identity theft, and long-term financial harm, necessitating heightened monitoring and mitigation efforts.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/4fc632a4-7af0-463f-8872-d7e52c20f46b.shtml

TPRM report: https://www.rankiteo.com/company/just-for-men-men-s-grooming

"id": "jus043091825",
"linkid": "just-for-men-men-s-grooming",
"type": "Cyber Attack",
"date": "11/2019",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 1439,
                        'industry': 'Consumer Goods (Personal Care)',
                        'name': 'Just For Men',
                        'type': 'Company'}],
 'attack_vector': 'External System Hacking',
 'data_breach': {'data_exfiltration': 'Yes',
                 'number_of_records_exposed': 1439,
                 'personally_identifiable_information': 'No (only '
                                                        'financial/payment '
                                                        'data)',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Financial account numbers',
                                              'Credit/debit card numbers',
                                              'Security codes',
                                              'Access information']},
 'date_publicly_disclosed': '2020-11-04',
 'description': 'The Maine Office of the Attorney General reported a data '
                'breach involving Just For Men on November 4, 2020. The '
                'breach, caused by external system hacking, occurred on '
                'November 22, 2019, potentially affecting 1,439 individuals, '
                'including 5 residents from Maine. The specific information '
                'compromised includes financial account numbers or '
                'credit/debit card numbers in combination with security codes '
                'or other access information.',
 'impact': {'data_compromised': ['Financial account numbers',
                                 'Credit/debit card numbers',
                                 'Security codes',
                                 'Access information'],
            'identity_theft_risk': 'High (financial data exposed)',
            'payment_information_risk': 'High (credit/debit card numbers and '
                                        'security codes exposed)'},
 'investigation_status': 'Disclosed',
 'post_incident_analysis': {'root_causes': 'External system hacking'},
 'references': [{'date_accessed': '2020-11-04',
                 'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
                                                        'Attorney General']},
 'response': {'communication_strategy': 'Public disclosure via Maine Office of '
                                        'the Attorney General'},
 'title': 'Just For Men Data Breach (2019)',
 'type': 'Data Breach'}