Dole Hit by Ransomware Attack, Disrupting North American Food Production Earlier this month, food producer Dole suffered a ransomware attack that forced the company to temporarily shut down its North American production plants and halt shipments to grocery stores. The incident came to public attention on [date of CNN report] after a Texas grocery store, Stewart’s, shared an internal Dole memo on Facebook explaining the shortage of prepackaged salad. The memo stated that Dole’s plants were closed for the day, with all shipments paused as the company worked to contain the threat. Customers across the U.S. reported frustration over the lack of Dole salad products on store shelves. Dole later confirmed the attack in a public statement, revealing that it had engaged third-party cybersecurity experts to mitigate the breach and secure its systems. The company also notified law enforcement and is cooperating with the investigation. While Dole reported that the operational impact was limited, it did not disclose the ransomware strain involved, whether data was exfiltrated, or if a ransom demand was made. This incident follows a similar 2021 attack on meat supplier JBS, where the REvil ransomware gang disrupted operations and extorted an $11 million payment. Ransomware remains a persistent threat to critical supply chains, with attacks increasingly targeting food production and distribution networks.

Dole Food Company stated that the threat actors who launched the latest ransomware attack had access to the personal information of the employees. The business disclosed that a ransomware attack had affected its operations. The corporation didn't disclose any specifics regarding the attack at the time of the revelation. Dole acted swiftly after becoming aware of the situation to neutralise the danger and hired renowned outside cybersecurity specialists. These experts have been collaborating with Dole's internal teams to fix the problem and safeguard systems ever since. The corporation had to close down production facilities across North America even though it denied that there had been a significant impact on its operations.

In June 2023, the California Attorney General disclosed a ransomware attack targeting Dole Food Company, which was initially detected in February 2023. The breach compromised employee personal data, including highly sensitive information such as names, addresses, Social Security numbers, and employment-related records. While the exact number of affected individuals remains undisclosed, the incident poses significant risks due to the nature of the exposed data. Ransomware attacks often involve encryption of critical systems paired with threats of data exposure unless a ransom is paid. In this case, the focus on employee records—rather than customer data—suggests the attackers prioritized internal corporate information, potentially for financial extortion or identity theft. The delayed public disclosure (four months post-breach) may indicate challenges in containment, forensic analysis, or regulatory compliance. The attack underscores vulnerabilities in Dole’s cybersecurity defenses, particularly against ransomware, which has become a prevalent threat vector for exploiting organizational gaps in data protection and incident response.