See's Candies

Disclosed Aug 13, 202623,737 affectedConfirmed

See's Candies ransomware attack leaks files with personal data on dark web

See's Candies said an unauthorized user accessed its network from April 11 to 13, 2026 and encrypted files after taking some of them, and that some stolen files were published on the dark web. It notified affected individuals in September.

What is known

People affected	23,737 (as reported by the organization)
Disclosed	Aug 13, 2026
Discovered	Apr 12, 2026
Happened	Apr 11, 2026
Attack	Ransomware
Data exposed	NamesOtherSocial Security numbersGovernment IDsHealthDates of birthAddresses
Sector	Retail · US
Status	Confirmed

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: See's Candies

Official noticeatg.wa.gov

Washington Attorney General breach notice: See's Candies

Regulatoroag.ca.gov

California AG breach report: See's Candies

Regulatoroag.ca.gov

See's Candies sample notice

Official noticeoag.my.site.com

Texas Attorney General data security breach report BR-0005305: See's Candies

Official noticein.gov

Indiana Attorney General 2026 data breach report: See's Candies

Notices filed

Residents of CAAug 13

California AGCount not stated

Residents of INAug 27

Indiana AG30 people

Residents of CASep 2

California AGCount not stated

Residents of WASep 2

Washington AG628 people

TotalSep 2

ResearchCount not stated

Residents of TXSep 3

Texas AG481 people

History of this record

source2026-10-02

empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-October-Year-to-Date-Report-2026.pdfby dailySource

data_types2026-09-25

["names","other"] to ["names","other","ssn","government-id","health","dob","addresses"]by backfillSource

records_basis2026-09-25

empty to organizationby backfillSource

records2026-09-25

empty to 23737by backfillSource

data_types2026-09-25

[] to ["names","other"]by seedSource

summary2026-09-25

empty to See's Candies said an unauthorized user accessed its network from April 11 to 13, 2026 and encrypted files after taking some of them, and that some stolen files were published on the dark web. It notified affected individuals in September.by seedSource

title2026-09-25

empty to See's Candies ransomware attack leaks files with personal data on dark webby seedSource

attack2026-09-25

unknown to ransomwareby backfillSource

discovered2026-09-25

empty to 2026-04-12by backfillSource

disclosed2026-09-25

2026-09-02 to 2026-08-13by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about See's Candies