WK Kellogg Co.

WK Kellogg Co. experienced a data breach due to a ransomware attack by the group CL0P, which exploited vulnerabilities in their third-party vendor Cleo's software. The data exposed included sensitive employee information such as names and Social Security numbers. CL0P's attack led to a significant data leak, threatening the privacy of employees and putting the company at risk of financial and reputational damage. WK Kellogg Co. has filed a data breach notice, notified affected individuals, and is offering identity theft protection services.

Source: https://cybersecuritynews.com/kelloggs-data-breach/

TPRM report: https://scoringcyber.rankiteo.com/company/jobs

"id": "job827040825",
"linkid": "jobs",
"type": "Breach",
"date": "4/2025",
"severity": "100",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Food Manufacturing',
                        'name': 'WK Kellogg Co.',
                        'type': 'Company'}],
 'attack_vector': 'Third-party Vendor Software Vulnerability',
 'data_breach': {'data_exfiltration': True,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': 'Employee Information'},
 'description': 'WK Kellogg Co. experienced a data breach due to a ransomware '
                'attack by the group CL0P, which exploited vulnerabilities in '
                "their third-party vendor Cleo's software. The data exposed "
                'included sensitive employee information such as names and '
                "Social Security numbers. CL0P's attack led to a significant "
                'data leak, threatening the privacy of employees and putting '
                'the company at risk of financial and reputational damage. WK '
                'Kellogg Co. has filed a data breach notice, notified affected '
                'individuals, and is offering identity theft protection '
                'services.',
 'impact': {'data_compromised': ['Employee Information',
                                 'Social Security Numbers']},
 'initial_access_broker': {'entry_point': 'Third-party Vendor Software'},
 'motivation': 'Financial Gain, Data Theft',
 'post_incident_analysis': {'root_causes': 'Vulnerabilities in third-party '
                                           'vendor software'},
 'ransomware': {'data_exfiltration': True, 'ransomware_strain': 'CL0P'},
 'response': {'communication_strategy': 'Filed a data breach notice, notified '
                                        'affected individuals, offering '
                                        'identity theft protection services'},
 'threat_actor': 'CL0P',
 'title': 'WK Kellogg Co. Data Breach',
 'type': 'Data Breach, Ransomware Attack',
 'vulnerability_exploited': "Cleo's software vulnerabilities"}