WK Kellogg Co

WK Kellogg Co, an American food manufacturing giant, reported a data breach involving unauthorized access to employee files during the widespread Cleo data theft attacks by the Clop ransomware gang. The incident, linked to zero-day flaws CVE-2024-50623 and CVE-2024-55956, led to the theft of personal data, including names and social security numbers. The company has taken measures to prevent future incidents by working with Cleo and offers affected individuals identity monitoring and fraud protection services.

Source: https://www.bleepingcomputer.com/news/security/food-giant-wk-kellogg-discloses-data-breach-linked-to-clop-ransomware/

TPRM report: https://scoringcyber.rankiteo.com/company/jobs

"id": "job738040725",
"linkid": "jobs",
"type": "Ransomware",
"date": "4/2025",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Food Manufacturing',
                        'location': 'United States',
                        'name': 'WK Kellogg Co',
                        'type': 'Corporation'}],
 'attack_vector': 'Unauthorized Access',
 'data_breach': {'data_exfiltration': True,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Names',
                                              'Social Security Numbers']},
 'description': 'WK Kellogg Co, an American food manufacturing giant, reported '
                'a data breach involving unauthorized access to employee files '
                'during the widespread Cleo data theft attacks by the Clop '
                'ransomware gang. The incident, linked to zero-day flaws '
                'CVE-2024-50623 and CVE-2024-55956, led to the theft of '
                'personal data, including names and social security numbers. '
                'The company has taken measures to prevent future incidents by '
                'working with Cleo and offers affected individuals identity '
                'monitoring and fraud protection services.',
 'impact': {'data_compromised': ['Names', 'Social Security Numbers'],
            'identity_theft_risk': True},
 'motivation': 'Data Theft',
 'ransomware': {'data_exfiltration': True, 'ransomware_strain': 'Clop'},
 'response': {'remediation_measures': ['Working with Cleo',
                                       'Identity Monitoring',
                                       'Fraud Protection Services'],
              'third_party_assistance': True},
 'threat_actor': 'Clop Ransomware Gang',
 'title': 'WK Kellogg Co Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': ['CVE-2024-50623', 'CVE-2024-55956']}