United Natural Foods (UNFI), the biggest supplier to Whole Foods, experienced a cyberattack on June 5 that forced the company to take its fulfillment and distribution systems offline. The attack led to empty grocery store shelves and disrupted business operations for weeks, causing reduced sales volume and increased operational costs. The company expects a material impact on its net income for the fourth fiscal quarter of 2025. While UNFI has restored core systems and resumed regular deliveries, the attack did not involve a breach of personal or protected health information.
Source: https://therecord.media/united-natural-foods-cyber-incident-q4-impact
TPRM report: https://scoringcyber.rankiteo.com/company/unfi
"id": "unf618062825",
"linkid": "unfi",
"type": "Cyber Attack",
"date": "6/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'industry': 'Food Distribution',
'location': 'North America',
'name': 'United Natural Foods (UNFI)',
'size': 'Serves over 30,000 customer locations',
'type': 'Corporation'}],
'customer_advisories': 'No notifications to individual consumers',
'date_detected': '2025-06-05',
'date_publicly_disclosed': '2025-06-15',
'description': 'A cyberattack on United Natural Foods (UNFI) on June 5 forced '
'the company to take systems offline that manage fulfillment '
'and distribution of customer orders. The attack resulted in '
'reduced sales volume and increased operational costs.',
'impact': {'data_compromised': 'None',
'downtime': 'About 10 days',
'financial_loss': 'Material impact on net income for the fourth '
'fiscal quarter of 2025',
'operational_impact': 'Reduced sales volume and increased '
'operational costs',
'revenue_loss': 'Material impact on net income',
'systems_affected': 'Systems that manage fulfillment and '
'distribution of customer orders'},
'investigation_status': 'Ongoing',
'references': [{'source': 'Local news outlets'}],
'regulatory_compliance': {'regulatory_notifications': 'Update to regulators '
'at the Securities and '
'Exchange Commission'},
'response': {'communication_strategy': 'Update to regulators at the '
'Securities and Exchange Commission',
'containment_measures': 'Systems taken offline',
'recovery_measures': 'Investigating and remediating the incident',
'remediation_measures': 'Restored core systems for electronic '
'ordering and invoicing'},
'title': 'Cyberattack on United Natural Foods (UNFI)',
'type': 'Cyberattack'}