Malley's Candies, Inc.
bd_31b664a0bbfdc878 · schema v1 · pii pii-v1
Full breach record for Malley's Candies, Inc. →Malley's Candies, Inc. notified the New Hampshire Attorney General of a cybersecurity incident affecting approximately 38 NH residents. Between April 11, 2021, and March 2, 2022, malicious code on malleys.com captured payment card data (names, card numbers, CVVs, expiration dates). The company discovered the breach on April 7, 2022, engaged forensic investigators, and began notifying affected individuals on May 6, 2022.
J jump to incidentP pin to compareR raw source
Incident timeline
Apr 11, 2021
Begins
Apr 7, 2022
Discovered
May 18, 2022
Filed
vs. sector median
4 wks faster
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- Massachusetts State AGbd_59e02ec09bd60ec02022-05-06 · +12dVerified
- Indiana State AGbd_8b169f39ba69eef32022-05-06 · +12dVerified
- Montana State AGbd_b9237fedfe4284782022-05-06 · +12dCandidate
- Maine State AGbd_cc9e4af726dfa7472022-05-06 · +12dVerified
Show 2 more filings ↓Show fewer ↑up to 89d gap
- New Hampshire State AGbd_1957d2c396e2e49d2022-08-15 · +89dVerified
- Maine State AGbd_2fad11d4b49e87c92022-08-15 · +89dVerified
Filing propagation · 7 filings · 5 states
View merged incident ↗Pattern: first filing May 6 (MA), last Aug 15 (ME) — a 101-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.