Cleo

Supply-chain cascade · 2025-04-04 – 2025-07-07

Downstream filings

Each organization below filed its own breach notification naming Cleo. Ordered by the earliest known incident date.

• WK KELLOGG CO2025-02-274 filings · 4 jurisdictions
• Blue Cross and Blue Shield of Massachusetts, Inc.2025-07-071 filing · 1 jurisdiction

This page records that each listed organization filed a breach notification naming Cleo as a third party. It makes no claim about causation, negligence, or any relationship that was not stated in a filing. Counts are of filings and organizations, not affected individuals, and are a floor rather than a total — an organization that filed naming Cleo may be grouped under a ransomware-actor cascade instead of this one.