The Vermont Attorney General reported a data breach involving The Hershey Company on December 1, 2023. The breach occurred between September 3 and 4, 2023, when an unauthorized user accessed a limited number of email accounts, potentially exposing personal information such as names, Social Security Numbers, and health information. The number of affected individuals is unknown.
Source: https://ago.vermont.gov/document/2023-12-01-hershey-company-data-breach-notice-consumers
TPRM report: https://www.rankiteo.com/company/the-hershey-company
"id": "the425072625",
"linkid": "the-hershey-company",
"type": "Breach",
"date": "9/2023",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'industry': 'Food and Beverage',
'name': 'The Hershey Company',
'type': 'Corporation'}],
'attack_vector': 'Unauthorized Access to Email Accounts',
'data_breach': {'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Names',
'Social Security Numbers',
'Health Information']},
'date_detected': '2023-12-01',
'date_publicly_disclosed': '2023-12-01',
'description': 'The Vermont Attorney General reported a data breach involving '
'The Hershey Company on December 1, 2023. The breach occurred '
'between September 3 and 4, 2023, when an unauthorized user '
'accessed a limited number of email accounts, potentially '
'exposing personal information such as names, Social Security '
'Numbers, and health information. The number of affected '
'individuals is unknown.',
'impact': {'data_compromised': ['Names',
'Social Security Numbers',
'Health Information']},
'initial_access_broker': {'entry_point': 'Email Accounts'},
'references': [{'date_accessed': '2023-12-01',
'source': 'Vermont Attorney General'}],
'threat_actor': 'Unauthorized User',
'title': 'Data Breach at The Hershey Company',
'type': 'Data Breach'}