Turke & Strauss LLP, a leading data breach law firm, is investigating Arhaus, LLC regarding its recent data breaches. The first Arhaus data breach involved sensitive personal identifiable information belonging to an undisclosed number of current and former employees. Arhaus’ second data breach involved sensitive personal identifiable information belonging to more than 3,100 individuals.
ABOUT ARHAUS, LLC:
Arhaus is a retail and home furnishings company that sells a variety of furniture and décor products. Their merchandise includes sofas, chairs, outdoor furnishings, tables, rugs, bedding, and seasonal accessories. Since it was founded in 1986, Arhaus has quickly expanded from four stores in Cleveland and Akron, Ohio, to a national chain with more than 75 locations across 28 states. Headquartered in Boston Heights, Ohio, Arhaus has grown to employ over 1,000 individuals.
WHAT HAPPENED?
On June 24, 2022, Arhaus concluded that it had experienced a data breach in which the sensitive personal identifiable information in its system may have been accessed. Through its investigation, Arhaus determined that an unknown actor gained access to this sensitive information through employee email accounts between March 25 and May 24, 2022. On July 22, 2022, Arhaus began notifying individuals whose information may have been impacted. The type of information exposed includes:
· Name
· Social Security number
· Driver’s license number
· Financial account information (e.g., account number, credit or debit card number)
Recently, Arhaus discovered that it had experienced a second and separate data breach in which the sensitive personal identifiable information in its system may have been accessed. After launching an investigation, Arhaus concluded that an unauthorized actor accessed this sensitive information through employee email accounts between October 3 and October 19, 2022. On February 10, 2023, Arhaus started notifying individuals whose information may have been impacted by this second data breach. The type of information exposed includes:
· Name
· Social Security number
If you received a breach notification letter from Arhaus:
We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at (608) 237-1775 or sam@turkestrauss.com.
If you were impacted by the Arhaus data breaches, you may consider taking the following steps to protect your personal information.
- Carefully review the breach notice and retain a copy;
- Enroll in the free credit monitoring service provided by Arhaus, LLC;
- Change passwords and security questions for online accounts;
- Regularly review account statements for signs of fraud or unauthorized activity;
- Monitor credit reports for signs of identity theft; and
- Contact a credit bureau(s) to request a temporary fraud alert.
LINKS
[1] https://media.dojmt.gov/wp-content/uploads/Consumer-Notification-Letter-423.pdf
[2] https://dojmt.gov/wp-content/uploads/Consumer-Notification-Letter-823.pdf
[3] https://apps.web.maine.gov/online/aeviewer/ME/40/9e04a741-d3c4-4817-a6cd-66042a779066.shtml
[5] https://www.mass.gov/doc/assigned-data-breach-number-29015-arhaus-llc/download