KandyPens
Disclosed Apr 20, 20206 years ago39,457 affectedConfirmed
What is known
| People affected | 39,457 (as reported by the organization) |
|---|---|
| Disclosed | Apr 20, 2020 |
| Discovered | Feb 12, 2020 |
| Happened | Mar 7, 2019 |
| Attack | Not stated |
| Data exposed | Names, Payment cards, Financial |
| Sector | Other · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: KandyPensoag.ca.gov · Official notice | Official notice |
| Oregon DOJ breach notice: KandyPensjustice.oregon.gov · Official notice | Official notice |
| Indiana Attorney General 2020 data breach report: KandyPensin.gov · Official notice | Official notice |
| Maine Attorney General breach notice archive: KandyPensmaine.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Apr 20, 2020 | |
| Oregon DOJresidents of OR | Apr 20, 2020 | 39,457 |
| Indiana AGresidents of IN | Apr 20, 2020 | 554 |
| Maine AGresidents of ME | Apr 20, 2020 | 204 |
History of this record
- 2026-09-25 · data_types: [] to ["names","payment-card","financial"] · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 39457 · backfill source
- 2026-09-25 · discovered: empty to 2020-02-12 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.