The Hershey Company Data Breach Investigation

Turke & Strauss LLP, a leading data breach law firm, is investigating The Hershey Company regarding its recent data breach. The Hershey Company data breach involved sensitive personal identifiable information and protected health information belonging to over 2,200 individuals.


The Hershey Company, commonly known as Hershey’s, is one of the largest and oldest chocolate manufacturers in the world. As a chocolate manufacturer, Hershey’s products include Hershey’s Kisses, Reese’s Peanut Butter Cups, Hershey’s Syrup, and more. Originally founded in 1984 as a subsidiary of the Lancaster Caramel Company, Hershey’s got its start when Milton Hershey developed a formula for milk chocolate that was less sensitive to milk quality. This resulted in the launch of the Hershey’s Milk Chocolate bar in 1900. Today, Hershey’s has more than 90 brands around the world and employs approximately 17,000 individuals. Headquartered in Hershey, Pennsylvania, Hershey’s has 19 plant locations worldwide and annual revenue of over $8 billion. 


Between September 3 and 4, 2023, Hershey’s discovered that it had experienced a data breach in which sensitive personal identifiable information and protected health information in its systems may have been accessed. Through its investigation, Hershey’s determined that an unauthorized actor may have accessed this sensitive information through a phishing attack. On December 1, 2023, Hershey’s began notifying individuals whose information may have been impacted. The type of information potentially exposed includes:

  • Name
  • Social Security Number
  • Health and medical information
  • Health insurance information
  • Digital signature
  • Date of birth
  • Address and contact information
  • Driver’s license number
  • Credit card number with passcode or security code
  • Credentials for online accounts and financial accounts, including routing numbers

If you received a breach notification letter from The Hershey Company:

We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at (608) 237-1775 or

If you were impacted by the Hershey’s data breach, you may consider taking the following steps to protect your personal information.

  1. Carefully review the breach notice and retain a copy;
  2. Enroll in any free credit monitoring services provided by The Hershey Company;
  3. Change passwords and security questions for online accounts;
  4. Regularly review account statements for signs of fraud or unauthorized activity;
  5. Monitor credit reports for signs of identity theft; and
  6. Contact a credit bureau(s) to request a temporary fraud alert.

Share This Post: