WK Kellogg Co Data Breach Details
The security breach, which occurred in December 2024, came to light on February 27, 2025, when WK Kellogg was informed that an unauthorized individual had gained access to Cleo’s servers. These servers were used to securely transfer employee files to WK Kellogg’s human resources service vendors.
Following the discovery, WK Kellogg launched an immediate investigation to assess the full extent of the breach. A review of the files on the compromised servers revealed that sensitive personal information, including the name and Social Security number of a Maine resident, was involved in the breach.
In response, WK Kellogg took swift action, reaching out to Cleo for further details and ensuring the security of its systems. The company also mailed a notification letter to the affected individual on April 4, 2025, in compliance with state law.
To support the impacted resident, WK Kellogg is offering one year of complimentary credit monitoring and identity protection services through Kroll, a global leader in risk management. These services include credit monitoring, fraud consultation, and identity theft restoration to help safeguard the individual’s personal information moving forward.
What Information Was Exposed?
The incident, which is still under investigation, involved sensitive personal information, such as:
- Name
- Social Security number