See's Candies Inc., a specialty retailer and confectionery manufacturer, formally reported a data security incident to the Indiana Attorney General on August 27, 2026. The company indicated that this breach, which occurred on April 11, 2026, compromised sensitive customer data maintained in their systems.
The exposed information includes Full Name, Email Address, Password or Credential Hash, Mailing Address, Purchase and Order History, Payment Card Information, Phone Number, and Customer Loyalty Account Details. This breadth of personal data could enable various forms of misuse by unauthorized parties.
For those affected, the exposure of this information presents significant risks. Compromised credentials can lead to unauthorized access to online accounts, potential financial fraud through payment card details, and identity theft. Attackers often use stolen login information to try gaining access to other online services, multiplying the potential for harm.
Under state consumer protection laws, including the Indiana Personal Information Security Breach Security Act, companies like See's Candies Inc. are obligated to safeguard customer data. This involves implementing robust security measures to prevent unauthorized access and protect against cyber threats. A data breach of this nature suggests that these protections may have been insufficient, leaving customer information vulnerable.
If you have received a data breach notification letter from See's Candies Inc., it means your personal information was compromised. You do not need to have already suffered financial loss to consider recourse; the increased risk and costs of mitigation can be actionable harms.
We are actively monitoring the See's Candies data breach. If you received a notification, you may be entitled to compensation. We offer a free case review to help you understand your rights and determine if you qualify to pursue a claim.