BreachScout BreachScout Breach Records

Regulator-posted notice

Breach notice filed by Malley’s Candies, Inc. (May 2022)

Organization named: Malley’s Candies, Inc. Provisional: identity as filed, not yet matched to the directory
Type as the source lists it: Malley’s e-commerce website www.malleys.com was modified with malicious code in order to capture payment card data

What the sources say

Maryland Attorney General security breach notices Primary notice

Posted on the Maryland Attorney General security breach notices with a submission date of May 6, 2022.

Organization as reported
Malley’s Candies, Inc.
Category as reported
Malley’s e-commerce website www.malleys.com was modified with malicious code in order to capture payment card data
Information types as reported
Names, credit or debit card numbers, CVV numbers, and card expiration dates
Submission date
May 6, 2022
Observed by BreachRecords
2026-10-19 05:01 UTC (revision 43923, list:Security-Breach-Notices-2022:item:515)
Archived copy
Held in the private archive (provenance)

The listing records a filing with the agency; it is not a finding by the agency.

Maine Attorney General Data Breach Notices database (Internet Archive captures) Duplicate filing

Posted on the Maine Attorney General Data Breach Notices database with a submission date of May 6, 2022.

Organization as reported
Malley’s Candies, Inc., Ohio
Entity type as reported
Other Commercial
Category as reported
Other; E-commerce website www.malleys.com was modified with malicious code
Information types as reported
Financial Account Number or Credit/Debit Card Number (in combination with security code, access code, password or PIN for the account)
Incident dates as reported
April 11, 2021
Discovery date as reported
April 7, 2022
Notice date as reported
May 6, 2022
Submission date
May 6, 2022
Observed by BreachRecords
2026-10-19 06:37 UTC (revision 59309, entry:26a8bcb8-a1d5-45d2-8011-1f633722eaf7)
Archived copy
Held in the private archive (provenance)
Captured copy
Copy captured by the Internet Archive on March 30, 2025 from https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/26a8bcb8-a1d5-45d2-8011-1f633722eaf7.shtml; agency page offline since June 12, 2026.

The listing records a filing with the agency; it is not a finding by the agency.

Figures, per source

  • 284 individuals affected (residents of the reporting state), according to the Maryland Attorney General security breach notices, source date May 6, 2022, revision observed 2026-10-19.
  • 14,254 individuals affected (total reported), according to the Maine Attorney General Data Breach Notices database, source date May 6, 2022, revision observed 2026-10-19.

Each figure is one source's figure with the basis that source gave. Figures from different sources are shown side by side and are not added, averaged or chosen between.

Timeline

Source dates are the dates the sources give. Observation dates are when BreachRecords recorded each revision.

  • Submission date (Maryland Attorney General security breach notices)
  • Submission date (Maine Attorney General Data Breach Notices database)
  • Observed by BreachRecords (revision 43923)
  • Observed by BreachRecords (revision 59309)
  • Approved by a reviewer

Organizations linked by a reviewer

  • Malley’s Candies, Inc. Named as the filer Provisional: identity as filed, not yet matched to the directory Linked 2026-11-04, method manual.

Archived evidence

  • 5ab600f2a4fae1a3f148520ee4d017dc3145a84ce9d898139474ecce077a6562
    application/json, 1,051,433 bytes, retrieved from Maryland Attorney General security breach notices, 2026-10-19 05:01 UTC. Archived privately · Provenance · Source page
  • 005659b81bd1647e7ed03327e0fefb87a5990b35fb3c14fde4da32e233f72aa0
    text/html, 15,199 bytes, retrieved from Maine Attorney General Data Breach Notices database, 2026-10-19 09:47 UTC. Archived privately · Provenance · Original page · copy captured by the Internet Archive on March 30, 2025

Records reflect source filings as of the dates shown. BreachRecords is not a regulator.

Request a correction

A record that disagrees with its source, names the wrong organization or duplicates another is corrected after review. This form is about Breach notice filed by Malley’s Candies, Inc. (May 2022). We acknowledge every request within two business days. We reply by email.

The form is being set up. Check back soon.