Kalahari employee network-data incident

Kalahari reported unauthorized network access and possible exposure of current and former employees’ personal information.

Last modified

Summary

  • Environment: Kalahari network and employee information
  • Operational impact: Possible employee-data exposure; outage scope not disclosed
  • Financial impact: No confirmed incident cost quantified
  • Record status: Developing record. Reviewed November 12, 2026; updated as evidence emerges.

What happened

Kalahari Management detected unauthorized network access October 9, 2026. On October 16 it determined that personal information may have been affected. Notices went to current and former employees of Kalahari companies. [1]

Impact

Potentially involved fields included names, addresses, birth dates and Social Security numbers. The October 30 letter reported no known specific misuse or related identity theft. It did not provide an affected-person count. [1]

Timeline

  1. Network access detected

    Kalahari engaged specialists to secure its network.

    [1]
  2. Possible data impact determined

    The investigation identified possible personal-information exposure.

    [1]
  3. Employee letter issued

    The notification described the potential data categories.

    [1]
  4. Briefing updated

    This briefing was last reviewed and updated on November 12, 2026.

Threat Group & Attack Vector

The notice confirms unauthorized access but does not establish how the intruder entered or whether information was removed.

Actors

  • No threat actor group has been identified in the reviewed public evidence.

TTPs

  • No specific ATT&CK technique is mapped from the available evidence.

Response

Kalahari investigated with cybersecurity experts, added security safeguards and reviewed its policies and procedures. It offered 12 months of credit monitoring. [1]