Security Affairs
U.S. CISA adds ownCloud, Linux Kernel, and JFrog Artifactory flaws to its Known Exploited Vulnerabilities catalog|Russian APT BlueDelta Uses HOOKEDGE to Target Defense and Diplomatic Organizations|PaperCut Zero-Day Under Active Attack: Emergency Patch Released|U.S. CISA adds Red Hat, Linux Kernel, Ajax.NET Professional, Microsoft SQL Server, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog|Cyberattack on UK Airport Operator MAG Exposes Data of 8.7 Million Customers Across Three Airports|Dark Caracal Deploys New Go Malware With Ethereum-Based C2 Fallback|Australian Police Charge Two Over TeamPCP Credential Theft|Meta to Pay Up to $18B Over Teen Social Media Use|CISA Warns Water Utilities: Find Your Exposed PLCs Before Attackers Do|OpenAI banned Russian ChatGPT accounts backing covert influence operation|CISA Red Team Fully Compromised Two Critical Infrastructure Orgs|FBI Seizes China-Linked Hacking Platforms QScan and QTRouter Used Against Critical Infrastructure|U.S. CISA adds ownCloud, Linux Kernel, and JFrog Artifactory flaws to its Known Exploited Vulnerabilities catalog|Russian APT BlueDelta Uses HOOKEDGE to Target Defense and Diplomatic Organizations|PaperCut Zero-Day Under Active Attack: Emergency Patch Released|U.S. CISA adds Red Hat, Linux Kernel, Ajax.NET Professional, Microsoft SQL Server, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog|Cyberattack on UK Airport Operator MAG Exposes Data of 8.7 Million Customers Across Three Airports|Dark Caracal Deploys New Go Malware With Ethereum-Based C2 Fallback|Australian Police Charge Two Over TeamPCP Credential Theft|Meta to Pay Up to $18B Over Teen Social Media Use|CISA Warns Water Utilities: Find Your Exposed PLCs Before Attackers Do|OpenAI banned Russian ChatGPT accounts backing covert influence operation|CISA Red Team Fully Compromised Two Critical Infrastructure Orgs|FBI Seizes China-Linked Hacking Platforms QScan and QTRouter Used Against Critical Infrastructure|
Advertisement

Ad Placeholder

Full Width × 90

Breaking News

A cyberattack on United Natural Foods caused bread shortages and bare shelves

Cyberattack on United Natural Foods Inc. (UNFI) disrupts deliveries, causing Whole Foods shortages nationwide after systems were taken offline on June 5. United Natural Foods, Inc. (UNFI) is a Providence, Rhode Island–based natural and organic food company. The largest publicly traded wholesale distributor of health and specialty food in the United States and Canada, it is Whole Foods Market‘s main supplier, with their traffic making up over […]

United Natural Foods

Cyberattack on United Natural Foods Inc. (UNFI) disrupts deliveries, causing Whole Foods shortages nationwide after systems were taken offline on June 5.

United Natural Foods, Inc. (UNFI) is a Providence, Rhode Island–based natural and organic food company. The largest publicly traded wholesale distributor of health and specialty food in the United States and Canada, it is Whole Foods Market‘s main supplier, with their traffic making up over a third of its revenue in 2018.

On June 5, United Natural Foods Inc. (UNFI) suffered a cyberattack that disrupted its systems and caused product shortages at Whole Foods stores nationwide.

“The company said the incident temporarily hurt its “ability to fulfill and distribute customer orders.” It added that the incident “is expected to continue to cause temporary disruptions” to its operations.” reports Reuters.

United Natural didn’t disclose details about the attack, but similar disruptions in the past have often been tied to ransomware attacks.

“A corporate Whole Foods spokesperson apologized for the inconvenience and said the company is working to restock shelves quickly, but declined to answer specific questions.” reported NBC News. “Two Whole Foods employees, who were not authorized by the company to speak with the press about the incident, told NBC News that the shortages were significant.”

“It’s affecting operations in a very, very significant way,” an employee at a Sacramento Whole Foods said. “Shelves don’t even have products in some places. The shipments we receive are not what we need, or we did need it but it’s too much of one product because UNFI can’t communicate with stores to get proper orders.”

A Whole Foods employee in North Carolina reported bread and supply shortages due to the UNFI cyberattack. UNFI has started restoring systems, but gave no clear recovery timeline. Experts warn that cyberattacks can disrupt complex food supply chains, delaying deliveries to customers.

The impact of the UNFI cyberattack has extended beyond Whole Foods, affecting smaller retailers as well. The Community Food Co-Op in Bellingham, Washington, informed customers that due to UNFI being its main supplier, some shelves may look bare.

“As we wait for UNFI to get their systems back online, you’ll see sparsely stocked shelves in some of our aisles. To help ensure that everyone in our community has access to essential items, we’re asking customers to limit their purchases to no more than two of any single item.” wrote the company on Facebook.

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, United Natural Foods)