R. R. DONNELLEY & SONS COMPANY
ent_019e2417347097e635319bc3d969816c
Disclosures
13
State AG · 8 jurisdictions
Multi-filing incidents
2
incidents joining 2+ filings here
Max affected reported
7,450
as filed · State AG IN
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- R. R. DONNELLEY & SONS COMPANY
- Normalized
- r r donnelley sons— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- SU4X0P4WWRGOQDTSV032
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (13)newest first
- South Carolina State AGas victim2022-08-08
R. R. Donnelley & Sons Company notified South Carolina residents of a cybersecurity incident where outside actors accessed systems starting November 29, 2021. Personal information was exfiltrated. The company engaged forensic investigators, shut down servers, and implemented new controls. Affected individuals were offered Experian IdentityWorks membership.
- Indiana State AGas victim2022-08-05
RR Donnelley & Sons Company reported a data breach to the Indiana Attorney General. The breach occurred on 2021-11-29 and was reported on 2022-08-05. 7,450 Indiana residents were affected.
- Maine State AGas victim2022-08-05
R. R. Donnelley & Sons Company reported an external system breach that occurred on November 29, 2021, and was discovered on December 23, 2021. The breach affected 98 Maine residents, compromising their names and driver's license or non-driver identification card numbers. Affected individuals were notified on August 5, 2022, and offered 12 months of identity theft protection services through Experian.
- Washington State AGas victim2022-08-05
R. R. Donnelley & Sons Company (RRD) reported a cybersecurity incident to the Washington AG. A threat actor affiliated with a foreign ransomware group gained access via phishing on Nov 29, 2021. RRD discovered the intrusion on Dec 23, 2021. Data exfiltrated included employee PII (names, SSNs, DOB, driver's licenses). RRD notified 648 Washington residents starting Aug 5, 2022, offering credit monitoring.
- Oregon State AGas victim2022-08-05
R.R. Donnelley & Sons Company reported a data breach to the Oregon Attorney General. The breach was reported on 2022-08-05. The breach occurred during 11/29/2021 - 12/23/2021. The breach was discovered on 12/23/2021. Notice was sent on 1/1/0001.
- California State AGas victim2022-08-05
R.R. Donnelley & Sons Company notified California residents of a systems intrusion discovered on December 23, 2021. Outside actors first accessed systems on November 29, 2021. Personal information, including names, addresses, and Social Security numbers, was exfiltrated. The company shut down servers, engaged forensic investigators, and offered identity theft protection services.
- Massachusetts State AGas victim2022-08-04
R. R. Donnelley & Sons Company reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-08-04. 998 Massachusetts residents were affected. The report records the breach type as electronic.
- New Hampshire State AGas victim2020-11-30
R.R. Donnelley & Sons Company notified NH AG of a programming error on Oct 9, 2020, where SSNs were printed on envelopes for former employees' benefits notices. Discovered Oct 29, 2020. 56 NH residents affected. Notification sent Nov 16, 2020. Credit monitoring offered.
- Indiana State AGas victim2020-11-15
R. R. Donnelley & Sons Company reported a data breach to the Indiana Attorney General. The breach occurred on 2020-10-09 and was reported on 2020-11-15. 142 Indiana residents were affected. 2,610 individuals affected in total.
- Massachusetts State AGas victim2020-11-13
R. R. Donnelley & Sons Company reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2020-11-13. 9 Massachusetts residents were affected. The report records the breach type as paper.
- Maine State AGas victim2020-11-13
R. R. Donnelley & Sons Company reported an inadvertent disclosure affecting 2,657 individuals, including 13 Maine residents. The breach occurred on October 9, 2020, and was discovered on October 29, 2020. Affected data included names and Social Security Numbers. The company sent written notifications on November 16, 2020, and offered identity theft protection services.
- Massachusetts State AGas reporting2013-01-28
RR Donnelley reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2013-01-28. 116 Massachusetts residents were affected. The report records the breach type as electronic.
- Massachusetts State AGas reporting2008-07-14
R.H.Donnelley, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2008-07-14. 150 Massachusetts residents were affected. The report records the breach type as electronic.
Supply-chain cascadesreviewed and confirmed
- R. R. DONNELLEY & SONS COMPANY supply-chain incident (2022)2022-05-02 – 2022-06-153 organizations linked