Major US candymaker targeted in ransomware attack