MULTI-COLOR CORPORATION

Multi-Color Corporation (MCC) experienced a cyberattack on September 29, 2022, where a third party gained unauthorized access to its IT environment. The incident compromised employee personnel files, including names, SSNs, driver's license numbers, health insurance data, and financial information. MCC contained the threat within hours, retained external incident response teams, notified the FBI and various regulators, and offered 24 months of credit monitoring to affected employees and their families.

Multi-Color Corporation reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-10-29. 3 Massachusetts residents were affected. The report records the breach type as electronic.

Multi-Color Corporation notified the New Hampshire Attorney General of a cybersecurity incident discovered on September 29, 2022, affecting at least 21 NH residents. Unauthorized third-party access compromised employee personnel files, including SSNs, driver's licenses, DOBs, and financial/health data. MCC engaged the FBI and forensic experts, contained the threat, and provided 2 years of credit monitoring.

Multi-Color Corporation reported a data breach to the Indiana Attorney General. The breach occurred on 2022-09-15 and was reported on 2022-10-26. 288 Indiana residents were affected. 3,729 individuals affected in total.

Multi-Color Corporation reported the theft of an external hard drive containing employee PII (names, SSNs, addresses) from an East Coast law firm's offices on May 14-15, 2016. The drive was stolen during a break-in. The company discovered the theft on May 16, 2016. This supplemental notice confirms eligibility for identity protection services for dependents. The investigation is ongoing with law enforcement.

Multi-Color Corporation reported a security incident to the California Attorney General. The breach occurred between May 14 and May 15, 2016. The organization offered 12 months of complimentary Experian ProtectMyID Elite identity protection services to affected individuals. Specific details regarding the nature of the breach, the number of affected individuals, and the specific data types compromised are not provided in the available filing summary or attachment text.

Multi-Color Corporation notified the NH Attorney General of a breach affecting 4 NH residents. A third-party law firm's office was burglarized on May 14-15, 2016, stealing a hard drive containing employee PII (names, SSNs, addresses). Multi-Color was notified on May 16, 2016. Notices were sent on June 15, 2016, offering 12 months of credit monitoring.