See’s Candies Discloses 2026 Ransomware Attack Impacting Customer Data See’s Candies, the U.S.-based confectionery company owned by Berkshire Hathaway, reported a ransomware attack in April 2026 that compromised portions of its network and exposed customer data. The breach, detected on April 12, 2026, involved unauthorized access between April 11 and April 13, during which attackers encrypted files on select servers. Initially, the company could not confirm whether data had been exfiltrated. However, a subsequent investigation revealed that the threat actor had stolen certain files before deploying ransomware. On April 30, 2026, the ransomware group Qilin claimed responsibility for the attack via a dark web post, asserting it had obtained See’s Candies data. The exposed information included names and other personal details. See’s Candies notified the California Attorney General on August 13, 2026, and began sending breach notifications to affected individuals after completing its review. As part of its response, the company is offering 12 months of complimentary identity theft protection through Experian IdentityWorks, including credit monitoring, identity restoration support, and $1 million in insurance coverage. Affected individuals must enroll using a unique activation code provided in their notification letters before the specified deadline. Support is available via Experian’s customer care line.