Latest / California / August 2022

R.R. Donnelley & Sons Company

R.R. Donnelley & Sons Company notified California AG on Aug 5, 2022 of a data breach, which occurred on Nov 29, 2021. Data exposed: Usernames / passwords, Postal address.

All 2 filings by R.R. Donnelley & Sons Company, state by state · Case file (dates, days to notice against the statute, what the letter offers, prior incidents)

Organization
R.R. Donnelley & Sons Company
Source
California AG · source record
Date reported
Aug 5, 2022
Date(s) of breach
Monday, November 29, 2021
Residents affected
Not published by this source
Data exposed
Usernames / passwords Postal address
Notice letter
Sample notice (PDF)
Discovered
Dec 23, 2021, as stated in the letter
"On December 23, 2021, RRD identified a systems intrusion in our technical environment."
Days to notice
225 days from discovery (Dec 23, 2021) to the California record (Aug 5, 2022). Statute: 30 days from discovery or notification of the breach (Cal. Civ. Code § 1798.82). Over the statutory period
Offered in the letter
credit or identity monitoring through Experian
First seen by BreachTally
2026-10-30 16:01 UTC

Dates and counts as filed by the organization with the agency. The breach window and the report date often differ by months.

First seen by BreachTally at 16:01 UTC on Oct 30, 2026. New filings reach paid subscribers within 30 minutes of the agency posting, with the count, the data exposed and the letter. Start a 14-day free trial. We email you two days before the first charge and you cancel in one click.
Not today? Take the free Monday digest: the week's filings by state and the largest by people affected. Once a week.

Other filings by R.R. Donnelley & Sons Company

OrganizationSourceStateReportedResidents affectedData exposed
R.R. Donnelley & Sons Company Oregon DOJ OR Aug 5, 2022 Not published Not stated

Data reproduced from a public government filing. Spot an error? Email support@breachtally.com with the record link. Corrections are applied and noted.