Kalahari Resorts data breach letter: employee Social Security numbers after an October 2026 network intrusion

Date	Event
October 9, 2026	Unauthorized access to the network first detected
October 16, 2026	Kalahari determines personal information may be affected
November 9, 2026	Notice posted by the California attorney general

What happened in the Kalahari data breach?

The letter says Kalahari found unauthorized access to its network environment on October 9, 2026. At first it had no evidence that sensitive data was involved. It hired cybersecurity experts to secure the network and to work out whether sensitive information was affected, and whose. People are being notified based on that analysis. The letter does not say how the intruder got in, whether ransomware was involved, or how many people are being notified.

Were Kalahari guests affected?

The filed letter is addressed to current and former employees, and it does not mention guests, reservations or payment cards. If you only stayed at a Kalahari resort and did not get a letter, nothing in this notice says your data was involved.

Has the stolen Kalahari data been misused?

Kalahari says it has no evidence that anyone's information was specifically misused and had received no reports of related identity theft from October 9, 2026 to the date of the letter. The letter explains how to place a free security freeze at each of the three credit bureaus.

What is Kalahari doing about the breach?

The letter says Kalahari is adding safeguards and security measures to prevent a similar event, and has reviewed and strengthened its security policies and procedures. It does not name the measures, and it does not say whether law enforcement was told.

Should I place a fraud alert or a credit freeze?

The letter describes both. A fraud alert tells creditors to take extra steps, such as contacting you, before they open new accounts or change existing ones. That protects you, but it can also slow you down when you apply for credit. An initial alert lasts one year. Identity theft victims can get an extended alert for seven years. A security freeze is meant to stop credit, loans and services from being approved in your name without your consent, and placing or lifting one is free. The letter adds that you can file or obtain a police report if you experience identity fraud, and that disputes often require one.

What is Kalahari offering people who got the letter?

Twelve months of single-bureau credit monitoring, a credit report and a credit score, plus fraud assistance from Cyberscout, at no charge. Enrollment is at bfs.cyberscout.com/activate with the code on the letter, within 90 days of the letter's date. The help line is 1-855-711-7980, 8:00 a.m. to 8:00 p.m. Eastern, Monday through Friday, for 90 days from the letter's date. Credit monitoring offers in breach letters compares this one-year offer with others in the log.