TL;DR: Kroll is a real company that many US organisations hire to provide free monitoring after a breach. Genuine letters point to enroll.krollmonitoring.com, include an activation code and deadline, and usually offer credit monitoring, fraud consultation and identity theft restoration. Before enrolling, verify the breach on your state attorney general’s breach list or the company’s website, and type the enrollment address yourself. Monitoring is worth activating, but a credit freeze does more.
Why you got a letter from a company you’ve never heard of
When a company has a breach, it often hires a breach-response firm to send notices and offer monitoring. Kroll is one of the best-known names in that business. So a letter on Kroll’s behalf about a dentist, payroll provider or software vendor you barely remember can be completely genuine.
What a real Kroll letter contains
Breach notices filed with state regulators, such as this sample filed with California’s attorney general, show the usual pattern:
- enrollment at enroll.krollmonitoring.com (info at info.krollmonitoring.com);
- a membership number or activation code and an enrollment deadline;
- services such as credit monitoring, fraud consultation and identity theft restoration;
- a call centre number for questions.
How to check it’s not a fake
Fake breach letters exist, especially after big headlines. Before entering anything:
- Look up the breach on your state attorney general’s data breach list (California, Massachusetts, Maine and others publish notices) or on the affected company’s website.
- Type the enrollment address yourself; don’t scan a QR code or click a link in an email.
- Be suspicious of any request for payment. Breach monitoring offered in a notice is free.
- Expect to give your SSN during enrollment on the official site, since credit monitoring needs it; never give it over an unexpected phone call.
Our guide to real vs fake breach notices has more checks.
Is it worth activating?
Yes, it’s free and it can alert you to new accounts or inquiries. But monitoring tells you *after* something happens. A credit freeze stops most new-account fraud from happening at all, also for free. Do both: activate the monitoring and freeze your credit. If your SSN was exposed, add an IRS IP PIN.
Set a reminder for when it ends
Free monitoring lasts for the period stated in your letter. When it ends, expect offers to keep paying for it. You don’t need to pay if your credit is frozen and you check your free reports at AnnualCreditReport.com. See is identity theft protection worth it?
One breach rarely travels alone
If one company lost your details, others probably have too. A free email exposure check shows which known breaches include your email.
Frequently Asked Questions
Is Kroll identity monitoring legitimate?
Yes, Kroll is a real breach-response company. Verify the specific breach and type enroll.krollmonitoring.com yourself before enrolling.
Is the monitoring in a breach letter free?
Yes. Monitoring offered in a genuine breach notice is free. Any request for payment is a red flag.
What does Kroll monitoring usually include?
Credit monitoring, fraud consultation and identity theft restoration, for a set period stated in the letter.
Is monitoring enough after a breach?
It helps you spot problems, but a credit freeze prevents most new-account fraud. Do both.
Sources
- California AG: Sample breach notice with Kroll enrollment details
- FTC: Credit freezes and fraud alerts