--- title: Candy giant Ferrara hit by ransomware, impacting production description: Just weeks before millions of kids build their annual candy stash, candy giant Ferrara Candy — who you may know as the makers of Nerds, Laffy Taffy, SweetTarts, and other favorites — was struck by a ransomware attack on October 9. canonical_url: https://www.acronis.com/en/tru/posts/candy-giant-ferrara-hit-by-ransomware-impacting-production/ locale: en last_updated: 2026-10-27 --- * [Home](https://www.acronis.com/en/tru/) * [Articles](https://www.acronis.com/en/tru/posts/) * [Acronis Threat Research Unit](https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/) 26 October 2021 # Candy giant Ferrara hit by ransomware, impacting production Just weeks before millions of kids build their annual candy stash, candy giant Ferrara Candy — who you may know as the makers of Nerds, Laffy Taffy, SweetTarts, and other favorites — was struck by a ransomware attack on October 9. Author: **[Acronis Threat Research Unit](https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/)** [Video 1](https://www.youtube.com/watch?v=R7o7h3lynqI) Just weeks before millions of kids build their annual candy stash, candy giant Ferrara Candy — who you may know as the makers of Nerds, Laffy Taffy, SweetTarts, and other favorites — was struck by a ransomware attack on October 9. Production in their manufacturing facilities was impacted, but Ferrara is now back up and running. While the company is still working through a backlog of orders, they do not expect a significant impact to consumers in the wake of this attack. The amount of the ransom demanded, and whether Ferrara chose to pay it, have not been released. The group responsible for the attack is also not known at this time. One tactic used by cybercriminals is to strike at critical times. This helps increase the pressure on victims to just pay up, so they can minimize the impact on their business. With Acronis Cyber Protect, there is no need to worry about ransomware attacks — its included Active Protection detects and blocks both new and unknown ransomware variants, no matter what group is responsible for the attack. Related articles [The Gentlemen: A closer look at a not-so-gentle ransomware-as-a- service operation](https://www.acronis.com/en/tru/posts/the-gentlemen-a-closer-look-at-a-not-so-gentle-ransomware-as-a-service-operation/) [Acronis AI Copilot: Adoption is high and growing among MSPs](https://www.acronis.com/en/tru/posts/acronis-ai-copilot-adoption-is-high-and-growing-among-msps/) [Acronis Cyberthreats Update, October 2026](https://www.acronis.com/en/tru/posts/acronis-cyberthreats-update-october-2026/) [AI agents at work: What Acronis endpoint data reveals about MSP and SMB usage](https://www.acronis.com/en/tru/posts/ai-agents-at-work-what-acronis-endpoint-data-reveals-about-msp-and-smb-usage/)