UNFI Shuts Down ‘Certain Systems’, Service Disrupted After Cyberattack

Leading wholesale distributor UNFI has shut down some of its computer systems, leading to service and fulfillment disruptions, following a cyberattack last week.

According to the company, UNFI discovered “unauthorized activity” in its network on Thursday, June 5, and proactively took several systems offline in accordance with its incident response plan.

In a statement, UNFI said it has notified law enforcement and is working with digital forensics experts to investigate the breach. The nature and extent of the attack has not been disclosed, nor is it known if any sensitive data was compromised.

Information security and technology publication Bleeping Computer reported that as of this morning no known ransomware operations have claimed responsibility for the attack.

The company also confirmed the incident in an 8-K filing with the U.S. Securities and Exchange Commission this morning.

“We are assessing the unauthorized activity and working to restore our systems to safely bring them back online,” the company wrote. “As we work through this issue, our customers, suppliers, and associates are our highest priority. We are working closely with them to minimize disruption as much as possible.”

On LinkedIn today, several brands and industry observers said they’ve been impacted by the incident.

Gregory Esslinger, head of sales at software company Floret and a former manager at UNFI, wrote that the attack appears to have impacted the business “on a national scale,” and Jason Smith, director of retail activations at Ithaca Hummus, commented on the site that the brand’s sales and demo program is “taking a massive hit because of this situation.”

In its release, UNFI said the company has “implemented workarounds for certain operations in order to continue servicing its customers where possible.”

The timing of the attack came just days before UNFI is scheduled to report its Q3 fiscal year 2025 earnings on Tuesday.