Kerkering Barberio Data Breach

According to the company's notice, the event may have resulted in unauthorized access to sensitive personal information and involved an affected business email account. Kerkering said it disconnected that account's access to its network. Public documents do not disclose how the account was compromised, the duration of access, which network resources were reached, or the responsible person or group.

Massachusetts's official breach report marks Social security numbers, financial account information, and driver's license numbers as affected data types. The recipient-specific field is redacted in the sample notice, so these three categories should not be assumed to have applied together to every person; recipients should rely on the scope stated in their own letter.

The company said it disconnected the affected business email account's network access, changed administrative credentials, restored operations in a secure mode, and enhanced security measures. It offered affected people 24 months of single-bureau credit monitoring, credit-report and credit-score services, and fraud assistance through Cyberscout.

Notice recipients should review credit reports and financial-account activity for unfamiliar transactions, accounts, or inquiries. A free credit freeze, fraud alert, or IRS Identity Protection PIN may be appropriate when a Social Security number is involved, while people whose driver's license information was affected can follow guidance from the issuing agency. Links using the Kerkering or Cyberscout name should be verified against the official notice.