Cyberattack at United Natural Foods Inc. (UNFI) Causes Widespread Disruption and Shutdown

October 7, 2025

INCIDENT

United Natural Foods Inc. (UNFI), a major U.S. food wholesaler, experienced a cyberattack in June 2025 that disrupted its distribution systems and impacted grocery stores, including Whole Foods, across the U.S..

The attack forced UNFI to shut down systems and switch to manual processes, causing order fulfillment issues and the potential for shortages. The food distributor and wholesaler completely shut down its systems upon discovering the attack. Core systems were restored and normal operating capacity returned within three weeks. The orders United Natural Foods was unable to fill — resulting in empty store shelves and spoilage in the wake of the attack — shows the wide financial impact of cybercrime. The company operates 52 distribution centers that fulfill about 250,000 products from more than 11,000 suppliers to 30,000 customer locations in North America.

Incident Date

June 5, 2025

Estimated Cost

$25 million directly related to attack; $400M in lost sales; Net income loss of $50-$60Million

Type of Malware

No Malware identified

Threat Source