United States
USA
R.R. Donnelley ransomware incident interrupts outsourced document production and delivery
Between 29 November and 23 December 2021, malicious actors intruded into R.R. Donnelley systems and deployed ransomware. RRD isolated servers during its response in late December, disrupting outsourced printing and document-delivery services. New Jersey government customers were unable to obtain certain printed motor-vehicle documents and payment checks. Subsequent SEC findings confirm the intrusion timeline; a security publication associated the attack with Conti.
82
Estimated severity
82 / 100
95
Source reliability
95 / 100
Approximate Date
2021-11-29
Targeted Company
RR DONNELLEY
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
NEW JERSEY OFFICE OF INFORMATION TECHNOLOGY (Business process outsourcer)
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
United States
Affected countries
United States
Impacted regions
New Jersey · United States
Operational Impact
Duration
No information
Financial impact (USD M)
No information
Impact types
Downstream customer disruptionOperational disruptionOrder fulfillment or delivery disruptionProduction interruption
Affected sectors
Professional & Business Services
Affected departments
Distribution & FulfillmentInformation TechnologyProduction & Manufacturing
Attack Profile
Attack types
Data exfiltrationRansomwareUnauthorized access
Attributed threat actors
CONTI
Sources
Incident Sources
sec.govhttps://www.sec.gov/Archives/edgar/data/29669/000119312521367028/d280996d8k.htmsec.govhttps://www.sec.gov/newsroom/speeches-statements/peirce-uyeda-statement-rr-donnelley-061824nj1015.comhttps://nj1015.com/nj-cant-print-mvc-documents-issue-checks-because-of-cyber-attack/bleepingcomputer.comhttps://www.bleepingcomputer.com/news/security/marketing-giant-rrd-confirms-data-theft-in-conti-ransomware-attack/sec.govhttps://www.sec.gov/newsroom/press-releases/2024-75