DataBreachCaseFile.com

Case file

Case File: PEZ Candy, Inc. Data Breach

This file collects the dated facts on record for the PEZ Candy, Inc. incident. The state report is dated May 6, 2025.

Timeline

  1. May 6, 2025Report filed in MassachusettsDate the notice was lodged with the Massachusetts Attorney General.

Case facts

Filing state
Massachusetts
Date reported
May 6, 2025
Receiving office
Massachusetts Attorney General

Case notes

PEZ Candy, Inc., known worldwide for its iconic dispensers and confectionery products, filed a data breach notification with the Massachusetts Attorney General's office on May 6, 2025. The company stated it is currently investigating a security incident that led to unauthorized access to its network infrastructure. This report alerts consumers and regulators to a potential compromise of data entrusted to the company.

As a global operation with extensive corporate, manufacturing, distribution, and e-commerce activities, PEZ Candy, Inc. manages substantial amounts of sensitive information. This includes comprehensive employee records, proprietary corporate data, and personal identifiable information related to customers, vendors, and business partners across its digital storefronts and internal systems. Such extensive data holdings often make companies like PEZ Candy, Inc. targets for malicious cyber activity.

While the specific categories of information involved in this incident are still emerging from the ongoing investigation, the exposure of any personal information can lead to significant, long-term risks for affected individuals. These risks can include an elevated threat of identity theft, various forms of fraud, and unauthorized account access, depending on the nature of the compromised data. The incident highlights the vulnerabilities inherent in modern digital operations.

Individuals who receive a notification from PEZ Candy, Inc. should act promptly. It is advisable to review financial statements and credit reports regularly for any suspicious activity. Consider placing a fraud alert or security freeze on your credit files as a proactive measure. Additionally, be vigilant against unsolicited communications, such as emails or calls, that request personal details, as these could be phishing attempts leveraging the breach.

PEZ Candy, Inc.'s reporting of this breach to the Massachusetts Attorney General is a formal acknowledgment of a significant security lapse. The investigation is ongoing, and further details are expected to emerge as the company continues to assess the full scope and impact of the compromise.

Questions about this case file

Where does the PEZ Candy, Inc. case file come from?
Every entry is taken from the breach report PEZ Candy, Inc. lodged with the Massachusetts Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?
Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?
It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?
Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

More Massachusetts case files

Massachusetts data breaches