The Hershey Company

The Hershey Company experienced unauthorized access to a limited number of corporate email accounts between September 3 and 4, 2023. The incident potentially affected approximately 1 New Hampshire resident. Accessed data may have included names, SSNs, DOBs, driver's license numbers, health information, and financial account details. Hershey terminated access, engaged forensic investigators, and implemented password resets and enhanced detection safeguards.

The Hershey Company experienced unauthorized access to a limited number of email accounts between September 3 and 4, 2023. The incident may have exposed personal information including names, SSNs, health info, and financial data. Hershey blocked access, engaged forensics, and offered 24 months of identity monitoring.

The Hershey Company reported a phishing campaign incident occurring September 3-4, 2023, affecting 2,214 individuals, including 1 Maine resident. The breach compromised names and financial account/credit card numbers. Hershey notified consumers in writing on December 1, 2023, and provided 24 months of credit monitoring and identity restoration services via Experian.

The Hershey Company reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-12-01. 4 Massachusetts residents were affected. The report records the breach type as electronic.

THE HERSHEY CO. filed a data-breach notice with the Illinois Attorney General during 2023 (case 23-813). The register records the breach as discovered on September 4, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.