Malley's Candies, Inc.
bd_b9237fedfe428478 · schema v1 · pii pii-v1
Full breach record for Malley's Candies, Inc. →Malley's Candies, Inc. notified Montana residents of a data security incident where malicious code on its e-commerce site captured payment card data. The incident occurred between April 11, 2021, and March 2, 2022, and was discovered on April 7, 2022. Affected data included names, contact info, and credit/debit card details with CVVs. The company engaged forensic investigators and enhanced security safeguards.
J jump to incidentP pin to compareR raw source
Incident timeline
Apr 11, 2021
Begins
Apr 7, 2022
Discovered
May 6, 2022
Filed
vs. sector median
5 wks faster
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- Massachusetts State AGbd_59e02ec09bd60ec02022-05-06Verified
- Indiana State AGbd_8b169f39ba69eef32022-05-06Verified
- Maine State AGbd_cc9e4af726dfa7472022-05-06Verified
- New Hampshire State AGbd_31b664a0bbfdc8782022-05-18 · +12dVerified
Show 2 more filings ↓Show fewer ↑up to 101d gap
- New Hampshire State AGbd_1957d2c396e2e49d2022-08-15 · +101dVerified
- Maine State AGbd_2fad11d4b49e87c92022-08-15 · +101dVerified
Filing propagation · 7 filings · 5 states
View merged incident ↗Pattern: first filing May 6 (MA), last Aug 15 (ME) — a 101-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.