Malley's Candies, Inc.
bd_cc9e4af726dfa747 · schema v1 · pii pii-v1
Full breach record for Malley's Candies, Inc. →Malley’s Candies, Inc. reported a cybersecurity incident involving its e-commerce website (www.malleys.com). The site was modified with malicious code, leading to unauthorized access. The breach affected 14,254 individuals, including 26 Maine residents. Compromised data included names and financial account or credit/debit card numbers (with security codes/PINs). The breach occurred on April 11, 2021, was discovered on April 7, 2022, and consumer notification was sent on May 6, 2022.
J jump to incidentP pin to compareR raw source
Incident timeline
Apr 11, 2021
Begins
Apr 7, 2022
Discovered
May 6, 2022
Filed
vs. sector median
5 wks faster
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- Massachusetts State AGbd_59e02ec09bd60ec02022-05-06Verified
- Indiana State AGbd_8b169f39ba69eef32022-05-06Verified
- Montana State AGbd_b9237fedfe4284782022-05-06Candidate
- New Hampshire State AGbd_31b664a0bbfdc8782022-05-18 · +12dVerified
Show 2 more filings ↓Show fewer ↑up to 101d gap
- New Hampshire State AGbd_1957d2c396e2e49d2022-08-15 · +101dVerified
- Maine State AGbd_2fad11d4b49e87c92022-08-15 · +101dVerified
Filing propagation · 7 filings · 5 states
View merged incident ↗Pattern: first filing May 6 (MA), last Aug 15 (ME) — a 101-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.