See’s Candies

Incident Overview

The See’s Candies cybersecurity event represents a confirmed E-commerce Skimming & Credential Theft within the Retail & Consumer Goods sector, attributed to the Magecart / E-commerce Skimmer cyber threat collective. Discovered through technical indicators and regulatory breach filings, the event resulted in unauthorized access to sensitive internal IT environments, impacting approximately 12,500 individuals and records.

Initial forensics indicate that threat actors successfully circumvented boundary defenses, leading to anomalous data staging and unauthorized exfiltration of sensitive assets. Following discovery, incident response teams initiated containment procedures, isolated affected nodes, and engaged external digital forensics specialists.

Compromised Assets & Data Scope

Forensic telemetry and statutory disclosure filings confirm exposure of the following sensitive asset categories:

• Primary Data Classes: Payment Card Numbers (PANs), Card Expiration Dates & CVVs, Customer Billing Addresses.
• Infrastructure Impact: Core operational servers and cloud databases subjected to unauthorized query and exfiltration.
• Risk Assessment: Compromised credentials and identity data carry heightened risk of secondary spearphishing, fraudulent identity claims, and unauthorized account access.

Statutory Disclosures & Compliance

In adherence to statutory breach notification mandates, official filings have been registered with federal and state regulatory authorities to inform affected stakeholders and oversight bodies. Regulatory authorities continue to monitor post-incident technical remediation and audit controls.