National law firm investigates See's Candies data breach exposing personal info

National law firm Edelson Lechtzin LLP is investigating a data security incident reported by See's Candies, Inc., which may have exposed personal information of customers and employees. The incident, disclosed to the California Attorney General's Office on August 13, 2026, was reportedly caused by a ransomware attack.

See's Candies, Inc. informed affected individuals directly about the breach, but the nature and extent of the data compromised were not fully detailed. The types of information potentially exposed include names, Social Security numbers, addresses, payment information, phone numbers, account records, and internal business records. While the exact date of the breach and the total number of individuals affected remain unclear, the firm advises those who received notification to be vigilant against identity theft and fraud.

Edelson Lechtzin LLP is evaluating potential legal remedies on behalf of individuals whose sensitive personal data may have been compromised. The firm offers free case evaluations to those who wish to explore their legal options. Attorney Marc Edelson, managing partner of Edelson Lechtzin LLP, emphasized, "We are committed to protecting the rights of those impacted by this breach."

Consumers and employees are advised to take immediate protective steps. Regularly review account statements and credit reports, and remain alert for any suspicious activity. Confirm whether your information was part of the breach and keep any correspondence from See's Candies. Consider placing fraud alerts and credit monitoring, updating passwords, and enabling two-factor authentication on affected accounts.

"We are here to support those who may have been impacted by this breach," said Edelson. "Our goal is to ensure they are aware of their legal rights and can take proactive steps to protect themselves."

See's Candies, Inc., known for its retail presence nationwide, is also encouraging affected individuals to stay informed and seek professional advice. The company's breach notification aligns with the California Consumer Privacy Act, which requires businesses to inform consumers about data breaches that may compromise their personal information.