DisclosureLens
MalwareRetail & ConsumerRetailRansomwareStolen CredentialsData ExfiltratedData EncryptedData PublishedCustomer Data InvolvedMulti-Stage ChainPIIIdentity (basic)LowActive

Sees Candies, Inc

bd_005f1017f2cce802 · schema v1 · pii pii-v2

Severity

Low

Discovered

Apr 12, 2026

Filed

Sep 3, 2026

To disclose

21 weeks

Affected

18state residents only

Linked

4 filings

Confidence

69%
Full breach record for Sees Candies, Inc →

See’s Candies, Inc. experienced a ransomware incident where an unauthorized user accessed its network from April 11-13, 2026, encrypting files and exfiltrating data. The company discovered the breach on April 12, 2026. Personal information of 18 New Hampshire residents was confirmed to be involved after files were found on the dark web. Notification letters were mailed on September 2, 2026. The investigation is ongoing.

Incident timeline

undetected · 1 days
discovery → filing · 21 weeks / 144 days

Apr 11, 2026

Begins

Apr 12, 2026

Discovered

Sep 3, 2026

Filed

vs. sector median

+11 wks slower

This filing is one of 4 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Filing propagation · 4 filings · 4 states

View merged incident ↗
Indiana State AGAug 27 · first
Massachusetts State AG+5d
Washington State AG+6d
New Hampshire State AG+7d · this page

Pattern: first filing Aug 27 (IN), last Sep 3 (NH) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.