Phishing Attack at Hershey Company Compromised PI of 2,214 people

December 13, 2023


A cyberattack that targeted The Hershey Company may have compromised the personal data of 2,214 people, the company revealed in December. The data breach was the result of an email phishing attack. The data that may have been compromised includes first and last names, health and medical information, dates of birth, financial account information, debit and credit card data and related access codes.

Incident Date

September 2, 2023

Estimated Cost

No cost values disclosed.


No victims identified

Type of Malware

Threat Source

No threat source identified