Tootsie Roll Data Breach Exposes Social Security Numbers

Published
May 2, 2025
Updated
May 2, 2025
Tootsie Roll Data Breach Exposes Social Security Numbers
Tootsie Roll Industries
Types of INFORMATION affected
  • Names
    Names
  • Social security numbers
    Social Security Numbers
  • Dates of birth
    Dates of Birth
  • Addresses
    Addresses
  • Government IDs
    Government IDs
  • Medical Information
    Medical Info
  • Financial Info
    Financial Info

Affected by the

Tootsie Roll Industries

data breach?

Join the Lawsuit

It's free to join. 

Banner advertisement for ExpressVPN to take control of your online security

Claim Depot may receieve a commission from links on this page

On April 29, 2025, Tootsie Roll Industries, Inc. disclosed a data breach to the Massachusetts Attorney General’s office, confirming that sensitive information had been compromised. According to the official data breach report, the breach affected at least four individuals in Massachusetts.

The exposed information included social security numbers and financial account details—both considered highly sensitive personally identifiable information (PII).

The notification sent to affected individuals states that names, social security numbers, and financial account information were impacted.

Tootsie Roll Industries' response

In response to the breach, Tootsie Roll Industries is offering complimentary access to Experian IdentityWorks for 24 months, which includes identity restoration services, credit monitoring, daily credit reports, and up to $1 million in identity theft insurance.

The company’s notice encourages affected individuals to enroll in the Experian IdentityWorks program by August 31, 2025, and provides a dedicated customer care line for assistance. Additionally, the notice outlines steps consumers can take to protect themselves, such as monitoring their credit reports, placing fraud alerts or credit freezes with the three major credit bureaus, and contacting law enforcement if they suspect identity theft.

Protect Your Data

A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.

This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.

Notice Letter

This browser does not support inline PDFs. Please download the PDF to view it: Download PDF

CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image