On June 30, 2024, The Kendal Corporation detected unusual activity on its computer network, prompting an immediate investigation with the help of third-party specialists. The investigation revealed that between June 26 and June 30, 2024, certain files on the network were potentially accessed without authorization.
These files contained information related to Kendal at Home members. It was determined that the breach affected 40 individuals in Massachusetts alone.
The types of consumer information exposed in this breach included:
The breach was reported to the Massachusetts Attorney General's office, and the official disclosure can be found on the Massachusetts Attorney General's website.
In response to the breach, The Kendal Corporation notified law enforcement and conducted a comprehensive forensic investigation with the assistance of third-party specialists. The company is working to review and enhance its data protection policies and procedures to prevent future incidents. Although there is no evidence suggesting misuse of the compromised information, The Kendal Corporation is offering affected individuals complimentary credit monitoring and identity protection services.
If you have been affected by this data breach, it is important to take proactive steps to protect your information. Here are some recommended actions:
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.