2025-06-09 UNITED NATURAL FOODS INC Cybersecurity Incident

Page last updated on June 9, 2025

UNITED NATURAL FOODS INC initially disclosed a cybersecurity incident in an SEC 8-K filing on 2025-06-09 08:31:10 EDT.

Company Summary

UNFI is an independent national distributor of natural, organic and specialty foods and related products.

Incident Details

Material: Unknown
Is Breach: Unknown
Records Compromised: Unknown
Data Types Impacted: No Data Types Tracked (yet)

Compromised Date:
Detected Date: 2025-06-05
Disclosure Date: 2025-06-09
Contained Date:
Recovered Date:

Attack Goal: Unknown

Costs: No Costs Tracked (yet)

Filings

8-K filed on 2025-06-09

UNITED NATURAL FOODS INC filed an 8-K at 2025-06-09 08:31:10 EDT
Accession Number: 0001020859-25-000021

Item 8.01 Other Events.

On June 5, 2025, United Natural Foods, Inc. (the “Company”) became aware of unauthorized activity on certain of its Information Technology (IT) systems. The Company promptly activated its incident response plan and implemented containment measures, including proactively taking certain systems offline, which has temporarily impacted the Company’s ability to fulfill and distribute customer orders. The incident has caused, and is expected to continue to cause, temporary disruptions to the Company’s business operations. The Company is working actively to assess, mitigate, and remediate the incident with the assistance of third-party cybersecurity professionals and has notified law enforcement. Pursuant to its business continuity plans, the Company has implemented workarounds for certain operations in order to continue servicing its customers where possible. The Company is continuing to work to restore its systems to safely bring them back online.

The investigation to assess the impact and scope of the incident remains ongoing and is in its early stages.

Company Information