Data Breach Notifications

Entity Information

• Type of Organization: Other Commercial
• Entity Name: Sturm, Ruger & Company, Inc
• Street Address: 1 Lacey Place
• City: Southport
• State, or Country if outside the US: Connecticut
• Zip Code: 06890

Submitted By

• Name: William J. Roberts
• Title: Attorney
• Firm name (if different than entity): Day Pitney LLP
• Telephone Number: 860-275-0184
• Email Address: wroberts@daypitney.com
• Relationship to entity whose information was compromised: Outside Counsel

Breach Information

• Total number of persons affected (including residents): 167,963
• Total number of Maine residents affected: 1,176
• If the number of Maine residents exceeds 1,000, have the consumer reporting agencies been notified: Yes
• Date(s) Breach Occured: 9/18/2020 – 2/3/2022
• Date Breach Discovered: 8/2/2022
• Description of the Breach:
  • Other
  • If other, please specify: Malware
• Information Acquired - Name or other personal identifier in combination with: Financial Account Number or Credit/Debit Card Number (in combination with security code, access code, password or PIN for the account)

Notification and Protection Services

• Type of Notification: Written
• Date(s) of consumer notification: 8/18/2022
• Copy of notice to affected Maine residents: Ruger-Template Individual Notice.pdf
• Date of any previous (within 12 months) breach notifications: N/A
• Were identity theft protection services offered: Yes
• If yes, please provide the duration, the provider of the service and a brief description of the service: Despite the fact that customers’ Social Security numbers were not affected by this data breach (in fact, Ruger does not even collect such data), Ruger is offering all affected customers 12 months of identity theft protection services through IDX, a data breach and recovery services expert. IDX identity protection services include: 12 months of CyberScan monitoring, a $1,000,000 insurance reimbursement policy, and fully managed identity theft recovery services.