Nickey Kehoe has notified customers about a data security incident tied to its email service provider, Klaviyo. According to the company, on March 29, 2026 it identified an unauthorized email sent through the Klaviyo system, along with an export event in which someone accessed and pulled customer information stored there. This is a case of a third-party vendor breach rather than a direct intrusion into Nickey Kehoe’s own systems — the company says it removed the compromised access credentials within 24 hours and tightened security around who can reach the Klaviyo account. Nickey Kehoe states it has found no further attempts to access the Klaviyo data and no unauthorized access to any other Nickey Kehoe systems.
