R.R. Donnelley & Sons

Disclosed Aug 5, 20224 years agoConfirmed

Official notice

What is known

People affected	Not stated in the sources we have
Disclosed	Aug 5, 2022
Discovered	Dec 23, 2021
Happened	Nov 29, 2021
Attack	Phishing
Data exposed	Not stated
Sector	Other · US
Status	Confirmed

Sources

Source	Kind
California Attorney General breach notice: R.R. Donnelley & Sonsoag.ca.gov · Official notice	Official notice
Washington Attorney General breach notice: R. R. Donnelley & Sonsatg.wa.gov · Official notice	Official notice
Oregon DOJ breach notice: R.R. Donnelley & Sonsjustice.oregon.gov · Official notice	Official notice

Notices filed

Where	Filed	People
California AGresidents of CA	Aug 5, 2022
Washington AGresidents of WA	Aug 5, 2022	648
Oregon DOJresidents of OR	Aug 5, 2022

Other breaches at R.R. Donnelley & Sons

Breach	Disclosed	Attack	Sector	Status	Affected
Disclosed Nov 15, 2020Nov 15, 20205 years ago	Nov 15, 20205 years ago	Not stated	Other	Confirmed	2,610

History of this record

2026-09-25 · attack: unknown to phishing · backfill source
2026-09-25 · discovered: empty to 2021-12-23 · backfill source
2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about R.R. Donnelley & Sons

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.