DisclosureLens
MalwareRetail & ConsumerRetailRansomwareData EncryptedData ExfiltratedData PublishedCustomer Data InvolvedPIILowContained

See's Candies

bd_66b7868fe831e233 · schema v1 · pii pii-v2

Severity

Low

Discovered

Apr 12, 2026

Filed

Sep 2, 2026

To disclose

20 weeks

Affected

Not disclosed

Linked

4 filings

Confidence

65%
Full breach record for See's Candies

See’s Candies, Inc. disclosed a ransomware incident where an unauthorized user accessed its network from April 11-13, 2026, encrypting files and exfiltrating data which was later published on the dark web. The company discovered the incident on April 12, 2026. Affected individuals are offered 12 months of Experian IdentityWorks.

California clockDiscovered Apr 12, 2026Notified Sep 2, 2026143d CA 30-day late20 weeks discovery → filing

Incident timeline

undetected · 1 days
discovery → filing · 20 weeks / 143 days

Apr 11, 2026

Begins

Apr 12, 2026

Discovered

Sep 2, 2026

Filed

vs. sector median

+13 wks slower

This filing is one of 4 about the same incident.View merged incident
A leak claim by qilin about this victim predates this filing by 124 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Regulatory filings (2) · sorted by filing gap

Filing propagation · 3 filings · 2 states

View merged incident ↗
California State AGAug 13 · first
California State AG+20d · this page

Pattern: first filing Aug 13 (CA), last Sep 3 (TX) — a 21-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.