Kellogg's reports security breach caused by Cleo vulnerability exploitation
Learn More
Kellogg's,, officiall named WK Kellogg Co - the American food manufacturing giant, is reporting a security breach caused by the exploitation of a vulnerability in Cleo, a vendor that provides secure file transfer services for the company.
The Clop ransomware group, believed to be responsible for the attack, gained unauthorized access to Kellogg's servers on December 7, 2024. The company only discovered this unauthorized access on February 27, 2025, nearly three months after the initial breach occurred.
Investigations revealed that the compromised servers were hosted by Cleo and were specifically used by WK Kellogg Co. for transferring files to their human resources vendors. The exposed data likely includes:
- Names
- Addresses
- Social Security numbers
- Dates of birth
Kellogg's has contacted Cleo to obtain a detailed list of files stored on the exposed servers to identify all affected individuals. The total number of impacted personsis not disclosed and the report stated that at least three individuals were affected.
