Introduction
United Natural Foods [1] [2] [3] [4] [5] [6] [7] [8], Inc (UNFI) [2] [3] [6] [7] [8], a leading wholesale distributor of natural and organic food products in the United States, is grappling with significant operational disruptions following a cyberattack [2]. This incident has affected the company’s ability to serve its extensive client base, including major retailers like Whole Foods Market.
Description
United Natural Foods [1] [2] [3] [4] [5] [6] [7] [8], Inc (UNFI) [2] [3] [6] [7] [8], a major wholesale distributor of natural and organic food products in the US, is currently facing significant operational disruptions due to a cyberattack that resulted in unauthorized activity detected on June 5, 2025 [2]. In response to this incident, the company has activated its incident response protocols [4] [8], which include shutting down parts of its internal systems to mitigate damage and facilitate a thorough investigation. UNFI is collaborating with third-party cybersecurity forensics experts and law enforcement to assess the situation and safely restore its systems.
The temporary shutdown has severely impacted UNFI’s ability to process and deliver customer orders, particularly affecting over 30,000 grocery store clients, including Whole Foods Market [6], which relies on UNFI as its primary distributor [2]. Reports of internal disruptions [8], such as shift cancellations and technical outages [8], have surfaced on social media [8], highlighting the operational delays that are expected to continue in the short term. While the specifics of the cyberattack remain undisclosed [8], it is unclear whether data was compromised or if a ransom was demanded, and no group has claimed responsibility for the attack [8].
To maintain customer service during this challenging period [8], UNFI has implemented emergency workarounds and backup procedures. The company is prioritizing communication and support for its customers, suppliers [2] [3] [6], and associates to minimize disruption [3]. However, ongoing challenges are anticipated as the situation evolves.
With an extensive distribution network comprising 58 centers and offering around 250,000 products from over 11,000 suppliers [2], the impact of this disruption is particularly significant for the grocery industry [2]. Although UNFI is focused on restoring affected systems [7], it has not provided a timeline for full recovery [7]. The incident may also lead to regulatory scrutiny and financial repercussions for the company, as details regarding the threat actor [7], method of intrusion [7], and potential data exfiltration remain unclear [7]. This incident is part of a broader trend of cyberattacks targeting the retail and grocery supply chain [1], following previous incidents that have affected other food industry companies in the US. Despite these challenges [8], UNFI plans to release its financial results for the third fiscal quarter on May 20 [8].
Conclusion
The cyberattack on UNFI underscores the vulnerability of the retail and grocery supply chain to digital threats. While the company has taken steps to mitigate the immediate impact through emergency protocols and communication strategies, the long-term implications could include regulatory scrutiny and financial challenges. As UNFI works to restore its systems, the incident serves as a reminder of the critical importance of cybersecurity measures in safeguarding essential supply chains.
References
[1] https://techcrunch.com/2025/06/09/major-us-grocery-distributor-warns-of-disruption-after-cyberattack/
[2] https://cybersecuritynews.com/united-natural-foods-suffers-cyberattack/
[3] https://progressivegrocer.com/unfi-suffers-cyberattack-forced-shut-down-systems
[4] https://www.infosecurity-magazine.com/news/wholesale-food-giant-unfi-admits/
[5] https://www.grocerydive.com/news/unfi-services-disrupted-cyberattack-grocery/750176/
[6] https://www.wholefoodsmagazine.com/articles/17600-unfi-investigating-unauthorized-system-activity
[7] https://cyberinsider.com/united-natural-foods-hit-by-cyberattack-causing-business-disruptions/
[8] https://www.freshfruitportal.com/news/2025/06/10/cyberattack-disrupts-operations-at-leading-food-distributor-unfi/
