An unauthorized third party gained access to KontrolFreek servers between October 21, 2015 and April 7, 2016, and obtained payment card information on an undisclosed number of customers, the company said in a breach notification filed with the California Attorney General's office.
KontrolFreek said it secured its web site and hired on a security expert to conduct a forensic investigation. The breach may have yielded names, addresses, payment card numbers and security codes to the third party. The company reminded consumers that under law they are entitled to a free credit report annually from the three nationwide consumer credit agencies and encouraged them to monitor their reports as well as their accounts for any untoward activity.
KontrolFreek will offer 12 months of identity protection services free of charge from AllClear ID.