WK Kellogg, the company behind the Kellogg’s cereals, has been hit by a major data breach. Cybercriminals from the ransomware group Clop exploited a vulnerability in the software of an external supplier, stealing employees’ personal data.
The data breach took place in December 2024, when data was stolen from the file transfer service Cleo. At the time, Cleo suffered a wave of attacks from Clop. The ransomware gang used zero days to gain access to Cleo servers. Then, on February 27, 2025, Kellogg’s discovered that the attacks may have affected it. The cereal manufacturer used third-party Cleo servers to transfer personnel files to HR service providers, and the attack targeted precisely these servers.
Read more…
Source: Techzine News
Sign up for our Newsletter
The latest news and insights delivered right to your inbox.
Related:
- Some Firstmac customer details breached in home lender hack
May 10, 2024
Some current and former customers of Brisbane-based non-bank home lender Firstmac were notified this afternoon that some of their details had been compromised in a “cyber incident”. Firstmac said that as soon as the incident was detected, they took steps to secure their systems, and engaged cyber security experts. Read more… Source: MSN News Sign up for our Newsletter Related:
- Thousands affected by cyber attack on Hong Kong college
May 10, 2024
Over 8,000 students of a private vocational college have been affected by a cyber attack, the privacy watchdog said on Friday. The Hong Kong College of Technology said its information technology network and file server were hacked in February. A ransomware group is believed to have got hold of 450GB of the college’s data and the ...
- Boeing says it refused to pay massive ransomware demand
May 9, 2024
Boeing has revealed it refused to pay a $200 million ransom demand from ransomware hackers who stole a tranche of sensitive data in 2023. The incident impacted elements of its parts and distribution business, but that flight safety was not compromised. LockBit’s affiliates walked away with 43 gigabytes of data, for which they later demanded an ...
- European Parliament election prep unearthed data breach
May 8, 2024
The breach, dating back to early 2024, was uncovered two weeks ago as the European Parliament intensified efforts to reinforce its cybersecurity in preparation for the upcoming European elections in June, a press officer from the European Parliament told Euronews. The compromised application which has now been taken offline is called ‘PEOPLE’, and collated sensitive information ...
- China suspected of hacking UK armed forces payroll
May 7, 2024
The government suspects China was behind the hack of an armed forces payroll system, the BBC understands. Defence Secretary Grant Shapps will not identify a specific culprit when he addresses MPs today, but is expected to warn of the dangers posed by cyber espionage from hostile states. The system used by the Ministry of Defence (MoD) ...
- UK: Cyber attack on Scots health board sees stolen data published on dark web
May 7, 2024
A large volume of data stolen during a cyber attack on a health board has been published by a ransomware group. Cyber criminals were able to access a significant amount of data including patient and staff-identifiable information during the attack on NHS Dumfries and Galloway which began at the end of February. Data relating to a ...