Post #4092503

2026-07-25 15:17 UTC

I got a notice I could get 2 years of identity monitoring from Kroll due to a breach with U of MN. I see that Kroll is a pretty large firm, but I also found a lot of people online with negative comments about Kroll and saying just locking/freezing your credit monitoring is the best thing you can do. I've already done that a long time ago. Any thoughts on Kroll or the usefulness of giving them identifying data about myself through their online enrollment form? I'm leaning against it. #privacy #infosec

Replies (3)

@Mpc0@infosec.exchange 2026-07-25 16:53

@Nonya_Bidniss@infosec.exchange I tend to enroll in these services just to impose costs on organizations that have data breaches. Making it slightly more expensive for them seems good.

Open ##4092502
@pejacoby@infosec.exchange 2026-07-26 18:56

@Nonya_Bidniss@infosec.exchange Kroll is yet-another-provider in the breach reward game. I’ve found them to be as useful as the rest - not very. They do a lot of other stuff in the cyber security space, where I have had some dealings with them and had good experiences. If you already have a monitoring package I haven’t seen them do anything amazingly different. And I’ve signed up with all of them, thanks to breaches!

Open ##4118796
@Nonya_Bidniss@infosec.exchange 2026-07-28 18:36

2/ Update: I just got an envelope in the mail from Kroll. They sent me $50 settlement from the U of MN breach. I was not expecting that

Open ##4170739