Every public data breach

Disclosed this week44On record26,355

44 disclosed this week · 26,355 on record

KandyPens

Disclosed Apr 20, 202039,457 affectedConfirmed

Official notice

What is known

People affected39,457 (as reported by the organization)
DisclosedApr 20, 2020
DiscoveredFeb 12, 2020
HappenedMar 7, 2019
AttackNot stated
Data exposedNamesPayment cardsFinancial
SectorOther · US
StatusConfirmed

Sources

Official noticeoag.ca.gov
California Attorney General breach notice: KandyPens
Official noticejustice.oregon.gov
Oregon DOJ breach notice: KandyPens
Official noticein.gov
Indiana Attorney General 2020 data breach report: KandyPens
Official noticemaine.gov
Maine Attorney General breach notice archive: KandyPens

Notices filed

Residents of CAApr 20, 2020
California AGCount not stated
Residents of ORApr 20, 2020
Oregon DOJ39,457 people
Residents of INApr 20, 2020
Indiana AG554 people
Residents of MEApr 20, 2020
Maine AG204 people
History of this record
data_types2026-09-25
[] to ["names","payment-card","financial"]by backfillSource
records_basis2026-09-25
empty to organizationby backfillSource
records2026-09-25
empty to 39457by backfillSource
discovered2026-09-25
empty to 2020-02-12by backfillSource
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about KandyPens