Malley's Candies, Inc.
ent_70c323f62a3cfe5a722ce646
Disclosures
7
State AG · 5 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
21,577
nationwide · State AG ME
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Malley's Candies, Inc.
- Normalized
- malley s candies— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- malleys.com
Disclosure history (7)newest first
- New Hampshire State AGas victim2022-08-15
Malley’s Candies, Inc. notified the NH AG that malicious code on its e-commerce site captured payment card data (PCI) from April 11, 2021 to July 1, 2022. 52 NH residents affected. Notices sent Aug 5, 2022. Remediation: migrated to Shopify.
- Maine State AGas victim2022-08-15
Malley's Candies, Inc. reported an external system breach (hacking) occurring between April 11, 2021, and July 1, 2022, discovered on April 7, 2022. The incident affected 21,577 individuals, including 26 Maine residents. Acquired data included names and financial account or credit/debit card numbers (with security codes/PINs). Written notifications were sent on May 6, 2022, and August 5, 2022. No identity theft protection services were offered.
- New Hampshire State AGas victim2022-05-18
Malley's Candies, Inc. notified the New Hampshire Attorney General of a cybersecurity incident affecting approximately 38 NH residents. Between April 11, 2021, and March 2, 2022, malicious code on malleys.com captured payment card data (names, card numbers, CVVs, expiration dates). The company discovered the breach on April 7, 2022, engaged forensic investigators, and began notifying affected individuals on May 6, 2022.
- Massachusetts State AGas victim2022-05-06
Malley¶s Candies, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-05-06. 255 Massachusetts residents were affected. The report records the breach type as electronic.
- Indiana State AGas victim2022-05-06
Malley's Candies, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2021-04-11 and was reported on 2022-05-06. 221 Indiana residents were affected. 14,254 individuals affected in total.
- Montana State AGas victim2022-05-06
Malley's Candies, Inc. notified Montana residents of a data security incident where malicious code on its e-commerce site captured payment card data. The incident occurred between April 11, 2021, and March 2, 2022, and was discovered on April 7, 2022. Affected data included names, contact info, and credit/debit card details with CVVs. The company engaged forensic investigators and enhanced security safeguards.
- Maine State AGas victim2022-05-06
Malley’s Candies, Inc. reported a cybersecurity incident involving its e-commerce website (www.malleys.com). The site was modified with malicious code, leading to unauthorized access. The breach affected 14,254 individuals, including 26 Maine residents. Compromised data included names and financial account or credit/debit card numbers (with security codes/PINs). The breach occurred on April 11, 2021, was discovered on April 7, 2022, and consumer notification was sent on May 6, 2022.