Data Breach Notifications

Entity Information

  • Type of Organization: Financial Services
  • Entity Name: Brown Brothers Harriman & Co. and its affiliates ("BBH")
  • Street Address: 50 Post Office Square
  • City: Boston
  • State, or Country if outside the US: MA
  • Zip Code: 02110

Submitted By

  • Name: Lisa Sotto
  • Title: Partner
  • Firm name (if different than entity): Hunton Andrews Kurth LLP
  • Telephone Number: 212-309-1223
  • Email Address: lsotto@huntonak.com
  • Relationship to entity whose information was compromised: Legal Counsel

Breach Information

  • Total number of persons affected (including residents): 2800
  • Total number of Maine residents affected: 34
  • If the number of Maine residents exceeds 1,000, have the consumer reporting agencies been notified:
  • Date(s) Breach Occured: 12/23/2021
  • Date Breach Discovered: 03/04/2022
  • Description of the Breach:
    • Other, External system breach (hacking)
    • If other, please specify: In December 2021, BBH was informed by its third-party print and mail vendor, R.R. Donnelley & Sons Company (“RRD”), that RRD had identified a systems intrusion affecting its internal environment. RRD indicated at the time that the issue was limited to RRD’s environment and that BBH’s data was not affected. In March 2022, however, RRD informed BBH that, in connection with the December 2021 RRD systems intrusion, an unauthorized party extracted certain BBH files from RRD’s environment. This issue was limited to RRD’s systems and did not affect BBH’s own networks or systems. Promptly after BBH was made aware of the issue regarding the affected BBH files, BBH took steps to determine its nature and scope, including reviewing the affected files to determine what, if any, personal information was contained within the files. Based on its investigation, BBH identified certain files that contained personal information about some of its clients. The affected personal information varied for different clients but may have included the individual’s name, mailing address, Social Security number and account number. BBH has arranged to provide the affected individuals with thirty-six (36) months of identity restoration and credit monitoring services at no cost to them.
  • Information Acquired - Name or other personal identifier in combination with: Social Security Number

Notification and Protection Services

  • Type of Notification: Written
  • Date(s) of consumer notification: BBH anticipates to send notice to the affected Maine residents on or around the week of May 23, 2022
  • Copy of notice to affected Maine residents: BBH - Template Individual Notice 5-11-22.pdf
  • Date of any previous (within 12 months) breach notifications:
  • Were identity theft protection services offered: Yes
  • If yes, please provide the duration, the provider of the service and a brief description of the service: Experian IdentityWorks Services, including credit monitoring and identity restoration services.