Multi-Color Corporation

Multi-Color Corporation, also referred to as MCC, is a corporation headquartered in the United States of America. The organization maintains human resources information for its workforce, including details on employees, former employees, applicants, and associated family members. This HR data encompasses personnel files, benefits enrollment records, Social Security numbers, addresses, and dependent information. The company’s data retention practices have been noted to limit the scope of certain incidents to internal HR records only. As a result, its core operational focus includes the secure management of employee‑related data.

On September 29, 2022, Multi-Color Corporation disclosed an unauthorized network access incident that compromised sensitive HR information such as personnel files and benefits enrollment data for current and former employees, as well as some spouses, partners, and dependents. The specific attack vector was not publicly disclosed, but the company reported taking preventive measures and found no evidence that the accessed data was exploited. A separate incident occurred on May 14, 2016, when a third‑party law firm’s office was burglarized, resulting in the theft of a hard drive containing employee data and its access password. The stolen drive held names, Social Security numbers, addresses, dependent details, and HR records for all U.S. employees at the time, plus certain former employees, applicants, and individuals linked to a predecessor company. Following the 2016 breach, Multi-Color Corporation launched an investigation involving law enforcement, private investigators, and external monitoring services, while expressing hope of recovering the stolen hardware to assess any further unauthorized access. Neither incident was reported to have affected customer or supplier data due to the company’s data handling practices.