See’s Candies Notifies Washington Residents of 2026 Data Incident

See’s Candies, a well-known confectionery retailer, filed a data security incident report with the Washington Attorney General on September 2, 2026. This filing indicates that customer information may have been compromised as a result of an unspecified data breach.

For customers who received a data breach notification letter from See’s Candies, this confirms that sensitive personal details were involved. The exposed data types specifically include Full Name, Email Address, Mailing Address, Password or Credential Hash, Purchase and Order History, Payment Card Information, and Phone Number. Exposure of these categories can lead to various risks, from targeted phishing campaigns and unauthorized online access to fraudulent charges and potential identity theft.

Under Washington state law, companies that collect consumer data have a duty to implement reasonable security measures to protect it. A reported data breach suggests that these security protocols may have been insufficient, potentially failing to meet legal obligations to safeguard customer privacy.

Receiving a data breach notification letter means your information was part of this incident. Understanding the implications of this exposure and your available legal options is an important step. You do not need to have already experienced fraud or financial loss to pursue recourse, as the increased risk of future harm and the loss of privacy are considered actionable injuries.

If you received a data breach notification letter from See’s Candies, understanding your options begins with a free, no-obligation case review. We can help you navigate what this notice means for you and discuss the steps you might take next.