Data Breach · Lawsuit Filed

Kalahari Data Breach Lawsuits Filed After Employee Social Security Numbers Exposed

Published November 13, 2026

Current and former employees of Kalahari companies who were notified that their names, addresses, dates of birth and Social Security numbers may have been exposed in the October 2026 Kalahari Management data breach may be covered by lawsuits filed in Wisconsin federal court. No class has been certified and there is nothing to file yet.

Water park with slides and pools — Kalahari data breach lawsuit
▼ Allegations Only · No Settlement Yet

This article describes a class action complaint. The statements below are unproven allegations. Kalahari Management Co., LLC has not been found liable, there is no certified class, and nothing to claim at this time. This page is informational and is not legal advice.

What Is This About?

Kalahari Management Co., LLC, the company behind the Kalahari indoor water park resorts, has been named in two new lawsuits in the U.S. District Court for the Western District of Wisconsin, filed on November 11 and November 12, 2026, days after Kalahari reported a data breach to the California Attorney General. OpenClassActions.com has not yet read the complaints, so their claims, the people they seek to represent and the relief they request are not confirmed here. Law firms that announced investigations describe them as proposed class actions over the breach. Any claims are allegations; Kalahari has not answered them in court and no judge has ruled.

Status Complaint Filed W.D. Wisconsin · filed November 11 and 12, 2026
Data Involved Names, addresses, birth dates, SSNs per Kalahari’s notice letter to current and former employees
Can I Claim? No — nothing to claim yet no class has been certified and there is no settlement

What Did Kalahari Report?

Kalahari Management Co. filed a breach notice with the California Attorney General on November 9, 2026, listing October 9, 2026 as the date of the breach. In its notice letter, dated October 30, 2026, the company told recipients they were receiving it “because you are a current or former employee of a Kalahari company.” The letter says Kalahari determined on October 15, 2026 that personal information may have been affected by unauthorized access to its network that was first detected on October 9, and that the information involved includes name, address, date of birth and Social Security number. Kalahari said it had no evidence that anyone’s information was specifically misused.

The company is offering 12 months of single-bureau credit monitoring and fraud assistance through Cyberscout, a TransUnion company, at no charge; the letter says recipients must enroll within 90 days of the letter’s date. Kalahari has not publicly said how many people were notified.

Who Is Affected?

Based on Kalahari’s notice letter, the people notified are current and former employees of Kalahari companies, not resort guests. The letter does not mention guest or payment card information. People who received a Kalahari notice letter are the ones whose information the company says may have been involved.

What Happens Next?

When several suits are filed over the same breach, they are often combined before one judge with a consolidated complaint. Kalahari will then respond, which in data breach cases often means a motion to dismiss. Any payment would come only from a later settlement or judgment approved by the court; there is no claim form, settlement or deadline now. OpenClassActions.com will update this page with the complaints’ claims and proposed class definitions once they are reviewed.

Questions

Was guest information exposed in the Kalahari data breach?

Kalahari’s notice letter says it went to people who are current or former employees of a Kalahari company, and lists name, address, date of birth and Social Security number as the information involved. The letter does not mention guest or payment card data.

When did the Kalahari data breach happen?

Kalahari says unauthorized access to its network was first detected on October 9, 2026, and that on October 15, 2026 it determined personal information may have been affected. Notice letters are dated October 30, 2026, and the company filed with the California Attorney General on November 9, 2026.

Is there a Kalahari settlement to claim?

No. The lawsuits were filed in November 2026, no class has been certified and there is no settlement, claim form or deadline. Kalahari is offering 12 months of free credit monitoring to people who received its notice letter, with enrollment open for 90 days from the letter’s date.

Where were the Kalahari lawsuits filed?

Two lawsuits against Kalahari Management Co., LLC were filed in the U.S. District Court for the Western District of Wisconsin, Nos. 3:26-cv-01104 (November 11, 2026) and 3:26-cv-01106 (November 12, 2026).

Sources

This page will be updated with the complaints’ claims and proposed class definitions as they become available.

For more class actions keep scrolling below.
Status Complaints Filed no class certified
Defendant Kalahari Management Co., LLC
Court U.S. District Court, Western District of Wisconsin
Case Numbers 3:26-cv-01104, 3:26-cv-01106 filed Nov. 11 and 12, 2026 · complaints not yet reviewed

More Data Breach Lawsuits and Settlements