Kalahari Data Breach

Names, home addresses, dates of birth and Social Security numbers of current and former Kalahari employees may have been exposed. The company first detected unauthorized access to its network on October 9, 2026.

What Happened at Kalahari

Kalahari Management Co. LLC (“Kalahari”) sent notice letters dated October 30, 2026, to current and former employees of a Kalahari company.

According to the Notice of Data Breach, Kalahari first detected unauthorized access to its network environment on October 9, 2026. At first, the company says, it had no evidence that sensitive data was involved. Kalahari hired cybersecurity experts to secure its network and investigate. On October 16, it determined that personal information may have been affected.

Kalahari says it has not received any reports of related identity theft since the date of the incident.

Why This Combination of Data Is So Dangerous

This breach involves four pieces of information that, together, make up a complete identity kit:

• Full name
• Home address
• Date of birth
• Social Security number

With all four, a criminal can try to open credit cards, take out loans, file a fake tax return or apply for benefits in someone else’s name. Unlike a credit card number, a Social Security number cannot simply be canceled and replaced.

Why Employee Data Is a Target

Employers keep Social Security numbers and birth dates for payroll, taxes and benefits. Employees have to hand over this information to get paid, so they have little choice in how it is stored. The letter says former employees are included too, which means the risk reaches people who may have left the company years ago.

What Information Was Exposed?

Based on the official notice, the information involved may include:

• Name
• Address
• Date of birth
• Social Security number

Kalahari has not disclosed how many people were affected. The company reported the incident to the California Attorney General, which California requires when a breach affects more than 500 California residents.

What Is Kalahari Offering?

Kalahari is offering 12 months of single bureau credit monitoring, a credit report and a credit score at no cost, through Cyberscout, a TransUnion company. Single bureau means the service watches one of the three major credit bureaus, not all three.

Enrollment is at bfs.cyberscout.com/activate using the code on each letter. Employees must enroll within 90 days of the letter date. For letters dated October 30, 2026, that is January 28, 2027. The enrollment is not available to minors under 18.

Questions go to Cyberscout’s help line at 1-855-711-7980, 8 a.m. to 8 p.m. Eastern time, Monday through Friday, for 90 days from the letter date.

Your Information Is at Risk

Kalahari says it has no evidence that the information was misused. Even so, stolen Social Security numbers can be sold and used long after a breach is announced.

Affected individuals can take these steps:

• Enroll in the Cyberscout monitoring before the 90-day deadline
• Place a free credit freeze with Equifax, Experian and TransUnion
• Request an IRS Identity Protection PIN to help block fake tax returns
• Order free credit reports at annualcreditreport.com
• Keep your notice letter

Do You Have Legal Options?

Employers that collect workers’ Social Security numbers and other personal details have a legal obligation to protect them. When that obligation is not met, affected employees may have legal rights and remedies.

Contact the Data Breach Attorneys at Emery | Reddy today for a Free Case Review. 

Your Personally Identifiable Information (PII) includes information that can be used to identify you, such as your name and other personal details. Organizations that manage healthcare data are legally required to safeguard this information. When PII is exposed in a data breach, it can potentially be used by cybercriminals to commit identity theft, financial fraud, or other misuse.

Residents of California may be entitled to additional protections under the California Consumer Privacy Act (CCPA), which provides enhanced rights regarding the collection, use, and safeguarding of personal information.

Frequently Asked Questions

Who was affected by the Kalahari data breach?

Current and former employees of a Kalahari company, according to the notice letter.

How many people were affected?

Kalahari has not disclosed a total. It reported the incident to the California Attorney General, which California requires when more than 500 California residents are affected.

What information was exposed?

The notice lists:

• Name
• Address
• Date of birth
• Social Security number

When did it happen?

Kalahari says it first detected unauthorized access on October 9, 2026, determined on October 16 that personal information may have been affected, and dated its letters October 30.

What should I do now?

Take these steps:

• Enroll in the free Cyberscout monitoring within 90 days of your letter
• Freeze your credit with all three bureaus
• Ask the IRS for an Identity Protection PIN
• Save your notice letter

Could scammers use this breach to target me?

Yes, that is a common follow-up risk. After a breach becomes public, scammers often send emails, texts or calls that mention the company by name to seem legitimate. Be careful with any message that:

• Asks you to confirm your Social Security number or bank details
• Pushes you to act fast or pay a fee
• Includes a link or attachment you did not expect

When in doubt, contact the company using the phone number printed on your official notice letter.

Do I have a legal claim?

You may. Employers that collect your Social Security number and other personal information have a duty to protect it, and a duty to tell you promptly when it is exposed. If you received a Notice of Data Breach letter from Kalahari, contact Emery | Reddy at 916.995.5968 or visit www.emeryreddy.com for a Free Case Review. No Fee Unless We Recover.