Osiac notified California residents of a data breach involving a third-party vendor, R.R. Donnelley & Sons Company (RRD). RRD identified a systems intrusion on December 23, 2021, and notified Osiac on January 17, 2023. Personal information, including name, address, and potentially Social Security numbers, was exfiltrated from RRD's systems. The data originated from a 2019 regulatory mailing. Osiac is offering free identity theft protection services through Experian.