See's Candies Confirms Ransomware Breach Exposing Customer and Employee Data

See's Candies, Inc. has notified the California Attorney General's Office and affected individuals of a data security incident reportedly stemming from a ransomware attack. The company has not disclosed when the breach occurred or how many people were affected, but reports indicate exposed data may include names, Social Security numbers, addresses, payment information, phone numbers, account records and internal business records.

Both customers and employees who received a notification letter could be at increased risk of identity theft, fraud and phishing attempts. A law firm has since launched an investigation into potential class action claims related to the breach, offering free case evaluations to those affected.

For businesses, this incident is a reminder that ransomware attacks often result in data theft as well as system disruption, meaning affected organisations must manage both operational recovery and the long-term risk to individuals whose data was exposed.