Southern Graphics Data Breach Affects 31,480 People: SSNs Exposed

On July 29, 2025, Southern Graphics Inc. (SGS & Co.) discovered a data breach affecting 31,480 individuals in the United States, including 19 Maine residents. The incident was first detected on Dec. 2, 2024, when the company became aware of unauthorized access to its IT systems. Further investigation revealed that the breach likely began on Nov. 18, 2024.

According to aMaine Attorney General’s data breach portal, after a comprehensive forensic review, the company concluded in late July 2025 that an unauthorized party had obtained sensitive personal information.

The breach exposed personally identifiable information (PII) and protected health information (PHI) including names, contact information (phone numbers, email addresses, postal addresses), dates of birth, government-issued identification details (Social Security numbers, passport numbers, driver’s license numbers, taxpayer ID numbers), and, in some cases, copies of government-issued identification documents.

The breach also compromised medical information, health insurance details, financial account numbers related to payroll, demographic information, employment-related details (such as salary, compensation, and work evaluations), and, in a limited number of cases, usernames or email addresses with passwords.

Notably, the types of information affected varied for each individual. The breach’s severity is underscored by the breadth of data exposed, which could be used for identity theft, financial fraud or other malicious activities.

Southern Graphics' response

Upon discovering the breach, Southern Graphics launched an investigation, engaged third-party forensic experts and took steps to contain the unauthorized activity by shutting down certain systems. The company also coordinated with law enforcement and implemented additional security measures to protect its systems.

For those affected, SGS & Co. has arranged complimentary identity monitoring services through Kroll for 24 months. This includes triple bureau credit monitoring, fraud consultation and identity theft restoration services. Affected individuals are encouraged to enroll in these services and remain vigilant by reviewing account statements, monitoring credit reports and being cautious of unsolicited communications requesting personal information.

The company notified consumers in writing on Sept. 3, 2025, detailing the types of information involved and providing guidance on steps to take. Individuals are advised to order their free annual credit reports, consider placing fraud alerts or security freezes on their credit files and report any suspicious activity to the appropriate authorities. More information on protective steps and resources is available in the official notice to consumers, which will be provided in PDF format at the bottom of this page.