Breachesby GlyphWK Kellogg
Disclosed Apr 4, 20254,093 affectedConfirmed
WK Kellogg employee data stolen in Cleo file transfer attacks
WK Kellogg said an unauthorized person accessed Cleo-hosted servers used to transfer employee files to HR vendors on December 7, 2024, exposing names and Social Security numbers; it learned of it on February 27, 2025.
What is known
| People affected | 4,093 (as reported by the organization) |
|---|---|
| Disclosed | Apr 4, 2025 |
| Discovered | Feb 27, 2025 |
| Happened | Dec 7, 2024 |
| Attack | Supply chain |
| Data exposed | NamesSocial Security numbersEmployment |
| Sector | Manufacturing · US |
| Status | Confirmed |
| Part of | Cleo (2024) |
Sources
Notices filed
Same campaign
History of this record
press to officialby backfillSource
https://www.bleepingcomputer.com/news/security/food-giant-wk-kellogg-discloses-data-breach-linked-to-clop-ransomware/ to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-2025.pdfby backfillSource
disclosed to confirmedby backfillSource
empty to in-agby backfillSource
0 to 1by backfillSource
empty to organizationby backfillSource
empty to 4093by backfillSource
2025-04-07 to 2025-04-04by backfillSource
empty to 2024-12-07by backfillSource
First recordedby seedSource
First seen 2026-09-25 (Research), confirmed by Indiana AG. Record counts are as reported. Not legal advice.