Cyber Attack Disrupts United Natural Foods, Threatening Whole Foods Supply Chain United Natural Foods (UNF), the primary distributor for Amazon-owned Whole Foods Market, has suffered significant operational disruptions following a cyber attack detected on June 5. The company, which relies on Whole Foods for nearly 23% of its $31 billion in annual net sales, confirmed "unauthorized activity" on its IT systems, forcing it to take critical systems offline. This has impaired its ability to fulfill and distribute customer orders, with further "temporary" disruptions expected as the investigation remains in its early stages. UNF has notified law enforcement and is working to restore systems while implementing workarounds to mitigate supply chain impacts. The breach threatens the smooth delivery of fresh produce and branded products to over 30,000 locations across North America, including Whole Foods stores. The company’s role as Whole Foods’ primary distributor was recently extended until 2032 under a new agreement, underscoring its critical position in the grocery chain’s supply network. The incident follows a string of cyber attacks targeting retailers, including recent disruptions at UK-based Marks & Spencer and Co-op. While UNF has not disclosed whether a ransom demand was made, the attack has already had financial repercussions its shares dropped 6.9% on Wall Street, reducing its market capitalization to $1.6 billion. UNF’s relationship with Whole Foods predates Amazon’s $13.7 billion acquisition of the grocery chain in 2017. The company is set to release its quarterly earnings report on June 11, though it remains unclear how the cyber incident will factor into its financial performance. Whole Foods has not commented on the situation.

The Maine Attorney General's Office reported that Associated Wholesale Grocers, Inc. (AWG) experienced a data breach between October 6 and October 7, 2023, affecting the personal information of five Maine residents, including names and Social Security numbers. AWG has offered credit monitoring and identity restoration services for twelve months to those affected.

Associated Wholesale Grocers Defeats Second Data Breach Lawsuit in Kansas Federal Court A federal judge in the U.S. District Court for the District of Kansas has dismissed a second proposed class-action lawsuit against Associated Wholesale Grocers Inc. (AWG) over its 2023 data breach, ruling that the lead plaintiff lacked legal standing to pursue damages. The decision, issued on Thursday, follows a similar dismissal in the same court less than a year prior. Toriana Patterson, a former AWG employee, alleged emotional distress, loss of privacy, and time spent mitigating risks due to the breach. However, Judge Eric F. Melgren determined that Patterson failed to establish a direct connection between the breach and any concrete harm such as actual or imminent identity theft necessary to proceed with the case. The ruling underscores the legal challenges plaintiffs face in proving standing in data breach litigation, particularly when damages are speculative rather than tied to demonstrated financial or identity-related losses. AWG, a major supermarket supplier, has now successfully defeated two lawsuits stemming from the same incident. The case highlights the evolving judicial scrutiny over data breach claims and the burden of proof required for plaintiffs to advance such lawsuits.