RRD, a Marketing Giant, Suffers a Conti Ransomware Attack

RRD, a leading integrated services company offering communications, commercial printing, and marketing to enterprise clients, has confirmed a data theft in a Conti ransomware attack. The company, which employs 33,000 people in over 200 locations and earned $4.93 billion in 2021, suffered a "systems intrusion in its technical environment" on December 27, 2021, leading to the shutdown of their network to prevent the attack's spread.

The attack resulted in disruptions for customers, with some unable to receive printed documents required for vendor payments, disbursement checks, and motor vehicle documentation. Initially, RRD stated they were not aware of any client data stolen during the attack. However, on January 15, 2022, the Conti ransomware gang claimed responsibility and began leaking 2.5GB of data allegedly stolen from RRD.

Despite the initial assumption that no client or corporate data had been compromised, RRD later confirmed that certain of its corporate data was accessed and exfiltrated. The company pledged to take all appropriate measures to safeguard the integrity of their data and clients' information.

The Nature of the Attack

RRD's vulnerability to such an attack may be attributed to the fact that they were actively engaged in restoring systems and returning to business-as-usual at the time of the intrusion. The Conti ransomware group, known for using phishing lures as an entry vector and leveraging TrickBot and BazarLoader Trojans to expand their access into the targeted IT infrastructure, rapidly encrypts data and worms its way onto adjacent corporate systems to inflict further damage.

The attack on RRD is a reminder of the increasing threat of ransomware attacks on essential services and businesses, which have become more frequent and sophisticated. Companies must remain vigilant and implement robust cybersecurity measures to protect against such threats.

Sources

• RRD Pittsburgh | Marketing Collateral and More | RRD
• Editorial: Cyberattack on court system is frustrating and familiar - Pittsburgh Post-Gazette
• Pittsburgh security provider's report finds ransomware attacks on businesses are increasing - TribLIVE
• Pennsylvania county pays $350,000 cyberattack ransom - WITF
• Marketing giant RRD confirms data theft in Conti ransomware attack - Security Magazine
• Printing Giant RR Donnelley Forced into Talks with Conti Ransomware Group - PrintWeek