Cyberattack on UNFI Disrupts Food Deliveries Across the U.S.
<p><!--StartFragment --></p>
<p><span class="cf0">Earlier this summer, United Natural Foods, Inc. (UNFI)</span><span class="cf1">—the largest wholesale distributor to Whole Foods and thousands of independent supermarkets—was hit by a cyberattack that forced the company to shut down parts of its IT infrastructure. The disruption came at a critical time for the food supply chain, leading to widespread delivery delays and empty shelves across grocery stores nationwide.</span></p>
<p><span class="cf1">The company reported detecting unauthorized activity within its systems on June 5 and quickly moved to contain the incident by taking affected systems offline. This precaution, while necessary, brought key operational platforms—such as order entry and inventory management—to a halt, severely impacting the flow of goods. With order fulfillment systems down, many stores were left scrambling to restock shelves, particularly for fresh and perishable items.</span></p>
<p><span class="cf1">Though UNFI has since begun a phased recovery and resumed some operations manually, the incident has had a significant financial and operational toll. The company estimates up to $400 million in potential lost sales. Stock value dipped, and in a related move, UNFI announced it was ending its supply agreement with Key Food Stores, affecting hundreds of jobs at a distribution center in Pennsylvania.</span></p>
<p><span class="cf1">Despite the challenges, UNFI has not revised its overall financial forecast for 2025, holding steady on its net sales expectations of $31.3 to $31.7 billion. CEO Sandy Douglas credited the company’s employees, customers, and supply partners for working together to minimize disruption and accelerate recovery efforts.</span></p>
<p><span class="cf1">The event is the latest in a growing trend of ransomware and cyberattacks targeting critical food and beverage infrastructure. For UNFI, the incident has become a wake-up call—reinforcing the need for more aggressive cybersecurity investments across both IT and operational technology environments. As Douglas noted, the company is reevaluating its entire approach to cyber risk, recognizing that industry-standard controls are no longer enough in today’s threat landscape.</span></p>
<p><a href="https://cyberscoop.com/united-natural-foods-whole-foods-distributor-cyberattack/" target="_blank" rel="noopener">Source</a></p>