Data Breach at Medical Food Home Delivery Service Affects 1.2M people.

September 26, 2023

INCIDENT

PurFoods, a U.S. producer of medically-tailored home-delivered meals, disclosed a data breach affecting over 1.2 million people. The incident occurred in January but was not discovered until February, the company said. Customers were notified late last week that their data had been compromised. PurFoods also notified federal law enforcement about the incident.

During the investigation, which is still ongoing, the company found out that certain files in its network were encrypted. It also identified the presence of tools that could be used for data exfiltration, adding that it’s possible that data was stolen from one of its file servers.

Incident Date

January 19, 2023

Estimated Cost


No cost values disclosed.

Victims

Type of Malware

No Malware identified

Threat Source

No threat source identified