Snap, Crackle, and Cyber Pop: WK Kellogg Co. Data Breach Shakes Up Sensitive Employee Info
WK Kellogg Co. faced a sticky situation after a cybersecurity breach exposed sensitive employee data. Attackers exploited vulnerabilities in Cleo software, with the Clop ransomware group suspected. WK Kellogg has begun notifying affected individuals and is offering free identity theft protection from Kroll. Remember, keeping your cereal safe is easier than securing your data!
Hot Take:
It seems WK Kellogg Co. has found itself in a cereal thriller, but unfortunately, it’s not the kind that ends with a sweet crunch. Instead, their employee data had a not-so-sweet spill, courtesy of some cyber baddies serving up a breakfast of mischief. Looks like the only “snap, crackle, and pop” here is the sound of that data breach echoing through the cyber halls.
Key Points:
- WK Kellogg Co. experienced a cybersecurity breach via exploited vulnerabilities in Cleo file transfer software.
- The breach was discovered on February 27, 2025, but the incident occurred on December 7, 2024.
- Data compromised includes sensitive employee information such as names and Social Security numbers.
- Cleo’s software flaws CVE-2024-50623 and CVE-2024-55956 were exploited by cybercriminals, possibly linked to the Clop ransomware group.
- WK Kellogg offers free identity theft protection to affected individuals.
Already a member? Log in here