THE HERSHEY COMPANY
ent_019e61562815660edf7fe568eb8c0554
Disclosures
2
State AG · 2 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
2,214
as filed · State AG ME
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- THE HERSHEY COMPANY
- Normalized
- the hershey— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 21X2CX66SU2BR6QTAD08
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (2)newest first
- 🍁Vermont State AGas victim2023-12-01
The Hershey Company notified consumers of a security incident between Sept 3-4, 2023, where an unauthorized user accessed limited email accounts. Data accessed included names, SSNs, health info, driver's licenses, and financial credentials. Hershey engaged forensic investigators, blocked access, and offered 24 months of Experian IdentityWorks. No evidence of misuse was found.
- 🦞Maine State AGas victim2023-12-01
The Hershey Company reported a phishing campaign incident occurring September 3-4, 2023, affecting 2,214 individuals, including 1 Maine resident. The breach compromised names and financial account/credit card numbers. Hershey notified consumers in writing on December 1, 2023, and provided 24 months of credit monitoring and identity restoration services via Experian.