Food & Beverage

April 11, 2026

Los Angeles, California- based candy manufacturer, See’s Candies suffered a ransomware attack in April and stolen personal information ended up on the Dark Web.
See’s Candies ended up notified on April 12 an unauthorized user accessed certain portions of its network and encrypted files on a subset of its servers.
“We immediately launched an investigation and remediation effort with the assistance of outside cybersecurity experts and notified law enforcement,” the company said in a notice to victims of the attack. “Our investigation determined that there was unauthorized access to portions of our network from April 11, 2026 to April 13, 2026.

June 5, 2026

Kingsburg, California-based grape producer, HMC Fresh Foods LLC, suffered a cyberattack in June where personally identifiable information ended up stolen in the hack.
“We recently determined that some of your personal information was involved in a data security incident,” the company said in a notice to victims. “We experienced unusual activity involving our computer networks on June 5, 2026, and immediately started an investigation using outside experts to assist.”
As a result of the investigation, HMC Fresh found some employee personal information ended up accessed or downloaded during the incident.

June 5, 2026

Reedley, California-based agricultural processor, Cabot Packing LLC (doing business as HMC Reedley), suffered a cyberattack in June where personally identifiable information ended up stolen in the hack.
“We recently determined that some of your personal information was involved in a data security incident.,” the company said in a notice to victims “We experienced unusual activity involving our computer networks on June 5, 2026, and immediately started an investigation using outside experts to assist.”
The investigation revealed threat actors were able to steal some employee personal information during the incident.

July 16, 2026

Coca-Cola Company ‘s subsidiary, fairlife LLC, suffered a ransomware attack that shut down production-related systems, company officials said Thursday, July 1.
After detecting the unauthorized access by a third party to a portion of its systems, Coke promptly activated its incident response and business continuity protocols, according to an 8-K report the company issued to the Securities and Exchange Commission (SEC).
The company’s investigation and assessment of the impact of the incident is ongoing, with the assistance of outside advisors and cybersecurity experts. Coke also notified law enforcement. Product quality and safety have not suffered an impact, according to the report.
However, as a result of the incident, production operations at fairlife in the United States are temporarily suspended. Having said that, fairlife’s Canada production operations are not suffering from the attack.

April 22, 2026

Morgan Hill, California-based seafood processor, Lusamerica Foods, suffered a cyberattack in February where personally identifiable information ended up stolen during the hack.
“Upon learning of this issue, Lusamerca Foods immediately commenced a thorough investigation,” the company said in a notice to victims of the attack. “As part of its investigation, Lusamerica Foods has been working very closely with external cybersecurity professionals experienced in handling these types of incidents.”
After the company conducted an extensive forensic investigation and comprehensive data review, on April 22, Lusamerica Foods discovered certain files containing personal information may have been subject to unauthorized access or acquisition.

November 17, 2025

Buffalo, New York-based food manufacturer, Rich Products Corporation, suffered a cyberattack via a phishing email last November where personally identifiable information ended up stolen in the hack.
“On November 17, 2025, First Advantage became aware that an unauthorized third party obtained access through sophisticated phishing to a single First Advantage Drug & Occupational Health Screening Unit employee’s account, according to a notice from Rich Products. “First Advantage promptly launched an investigation and determined that the unauthorized third party gained access on or about November 13, 2025.”
The cybersecurity incident originated at First Advantage Corporation, a background screening and identity verification provider that conducts over 200 million screens annually. Rich Products works with First Advantage.

February 15, 2026

New York, New York-based cheese processor, Murray’s Cheese LLC, suffered a ransomware attack in February where devices became unavailable.
“On February 21, 2026, Murray’s Cheese LLC detected unusual activity within its network that caused certain devices to become unavailable,” the company said in a notice to victims. “Murray’s immediately implemented its response protocols, took measures to contain the activity, and launched an investigation.”
Additionally, a cybersecurity firm that has assisted other companies in similar situations also ended up hired. The evidence showed there was unauthorized activity within the Murray’s network between February 15 and February 21.

August 14, 2025

Bay City, Michigan-based Michigan Sugar Company (MSC) suffered a cyberattack in August and is now letting victims know their personally identifiable information ended up stolen in the hack.
“On August 14, 2025, MSC became aware of suspicious activity in its network in which an unauthorized third party gained access to certain systems in its network,” the company said in an advisory. “Upon becoming aware of this event, MSC promptly launched an investigation, with the assistance of third-party cybersecurity specialists, to determine the nature and scope of the event.”
MSC’s investigation found unauthorized access to certain company systems on August 14 and that may have resulted in the unauthorized access and acquisition of certain data.