R. R. Donnelley & Sons Company

On October 9, 2020, **R. R. Donnelley & Sons Company** experienced a data breach reported by the Maine Office of the Attorney General on November 13, 2020. The incident involved the **inadvertent disclosure of Social Security Numbers (SSNs)**, affecting **13 Maine residents** among a total of **2,657 individuals** whose sensitive data was exposed. The breach stemmed from an internal error leading to unauthorized access or exposure of personally identifiable information (PII), specifically SSNs—a high-value target for identity theft and fraud. While the total number of impacted individuals was substantial, the immediate focus was on the **13 Maine residents**, whose SSNs were confirmed compromised. The company initiated notifications to affected parties on **November 16, 2020**, likely offering credit monitoring or identity protection services as remediation. The breach highlights vulnerabilities in data handling procedures, particularly around the safeguarding of critical identifiers like SSNs, which can have long-term repercussions for victims, including financial fraud, credit damage, and reputational harm to the organization.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c4eed90b-ae23-47e4-877e-61972080745e.shtml

TPRM report: https://www.rankiteo.com/company/rr-donnelley

"id": "rr-1011091725",
"linkid": "rr-donnelley",
"type": "Breach",
"date": "10/2020",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 2657,
                        'industry': 'Printing & Business Communications',
                        'location': 'United States',
                        'name': 'R. R. Donnelley & Sons Company',
                        'type': 'Corporation'},
                       {'customers_affected': 13,
                        'industry': 'Legal/Regulatory',
                        'location': 'Maine, United States',
                        'name': 'Maine Office of the Attorney General',
                        'type': 'Government'}],
 'customer_advisories': 'Notification letters sent to affected individuals '
                        '(2020-11-16)',
 'data_breach': {'number_of_records_exposed': 2657,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Social Security Numbers']},
 'date_detected': '2020-10-09',
 'date_publicly_disclosed': '2020-11-13',
 'description': 'The Maine Office of the Attorney General reported a data '
                'breach involving R. R. Donnelley & Sons Company on November '
                '13, 2020. The breach, which occurred on October 9, 2020, '
                'involved the inadvertent disclosure of Social Security '
                'Numbers affecting 13 Maine residents out of a total of 2,657 '
                'individuals. Notification to affected individuals was made on '
                'November 16, 2020.',
 'impact': {'data_compromised': ['Social Security Numbers'],
            'identity_theft_risk': 'High (SSNs exposed)'},
 'references': [{'date_accessed': '2020-11-13',
                 'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Maine Office of the '
                                                       'Attorney General'},
 'response': {'communication_strategy': 'Notification to affected individuals '
                                        '(scheduled for 2020-11-16)'},
 'title': 'R. R. Donnelley & Sons Company Data Breach (2020)',
 'type': 'Data Breach'}