Cyberattack Targeting Whole Foods, Walmart Supplier ‘United Natural Foods’ Disrupted Operations

• Organic food supplier UNFI was hit by a cyberattack that impacted the company’s customers.
• The incident may impact the food supply of retailers such as Whole Foods and Walmart.
• While the scope of the incident was not revealed, UNFI is working on restocking shelves.

United Natural Foods Inc. (UNFI) recently reported a significant cyberattack that disrupted its IT systems and operations. The company confirmed on Monday that it had detected "unauthorized activity" in its internal networks on June 5. 

The immediate response involved proactively taking certain systems offline to contain the situation, which has temporarily impacted customer order fulfillment and distribution processes, according to the 8-K filing.  

UNFI is one of the largest grocery distributors in the U.S. and Canada and is known for its supply to major retailers like Whole Foods and Walmart.

UNFI has disclosed its collaboration with customers, suppliers, and associates to minimize disruptions. However, operations are expected to face temporary impediments as systems are restored, as a Whole Foods spokesperson told Reuters that the company is working to restock shelves.

The company has not explicitly identified the nature of the cyber intrusion, but industry observers speculate that ransomware may be involved.  

UNFI’s case is not isolated; similar cyberattacks targeting food supply sectors have caused ripple effects, such as the Marks & Spencer disruption in April. The breach was attributed to DragonForce Ransomware and is believed to be stemming from a third-party provider.

Further details on the scope of the attack and timelines for full operational recovery are awaited, as UNFI continues active investigations into the breach.