The incident was disclosed following widespread reports on social media that the company's systems had been down, and employees were having their shifts canceled. American grocery wholesale giant United Natural Foods (UNFI) reports that it has restored its core systems and brought online the electronic ordering and invoicing systems affected by a cyberattack. UNFI disclosed earlier this month that a June 5 cyberattack impacted customer orders and caused temporary disruptions to business operations after it forced it to take some systems offline. In a separate 8-K filing with the U.S. Securities and Exchange Commission, the grocery distributor said it believes the incident is also "reasonably likely" to have a material impact on its net income/(loss) and adjusted EBITDA for the year's fourth fiscal quarter of 2025. The Company has also incurred, and expects to continue to incur, direct expenses related to the investigation and remediation of the incident," UNFI said. Since the breach was discovered, UNFI has also hired external cybersecurity experts to investigate the incident and notified relevant law enforcement authorities. More recently, the Scattered Spider threat actors and the DragonForce ransomware operation have targeted UK retailers, such as Harrods, Co-op, and Marks & Spencer, and are now shifting their focus to U.S. retailers and insurance companies. "In the weeks following the incident, the Company experienced reduced sales volume and increased operational costs as the Company worked to drive solutions-oriented results for its customers. UNFI has not yet disclosed the nature of the attack or whether any ransomware group has claimed responsibility for the breach. UNFI is the latest food industry company to face a data breach. With over 28,000 employees, more than 11,000 suppliers, and 53 distribution centers, it delivers fresh and frozen products to over 30,000 locations in the U.S. and Canada, including supermarket chains, e-commerce providers, and independent retailers. JBS Foods, the world's largest beef producer, also paid an $11 million ransom in 2021 after REvil ransomware shut down production at multiple sites worldwide. In March, Sam's Club, owned by Walmart, announced it was investigating a ransomware breach linked to the Clop ransomware gang.
This Cyber News was published on www.bleepingcomputer.com. Publication date: Fri, 27 Jun 2025 06:25:14 +0000