THE HERSHEY COMPANY

The Hershey Company notified consumers of a security incident between Sept 3-4, 2023, where an unauthorized user accessed limited email accounts. Data accessed included names, SSNs, health info, driver's licenses, and financial credentials. Hershey engaged forensic investigators, blocked access, and offered 24 months of Experian IdentityWorks. No evidence of misuse was found.

The Hershey Company reported a phishing campaign incident occurring September 3-4, 2023, affecting 2,214 individuals, including 1 Maine resident. The breach compromised names and financial account/credit card numbers. Hershey notified consumers in writing on December 1, 2023, and provided 24 months of credit monitoring and identity restoration services via Experian.

Affected (this filing): 2,214