Dot Foods Suffers Email Breach Exposing Employee Social Security Numbers On December 3, 2025, Dot Foods, Inc. and its logistics arm, Dot Transportation, detected unauthorized access to a limited number of employee email accounts. The companies swiftly secured the accounts and initiated an investigation with cybersecurity and forensic experts. The breach, occurring between December 3 and 4, 2025, involved an unauthorized actor viewing email messages within the compromised accounts. While it remains unconfirmed whether attachments were accessed, investigators could not dismiss the possibility. On December 15, Dot Foods identified that an exposed attachment contained sensitive employee data, including names and Social Security numbers. The incident affected 6,374 individuals across the U.S., with one confirmed case in Maine and six in Massachusetts. Written notifications to impacted employees began on January 7, 2026. In response, Dot Foods and Dot Transportation reported the breach to the FBI, notified employees on December 17, 2025, and offered two years of complimentary credit monitoring and identity restoration services through Norton LifeLock. The companies also implemented enhanced security measures, policy reviews, and additional employee training to mitigate future risks. Affected individuals were advised to enroll in the monitoring service by March 28, 2026.

Dot Foods Data Breach Exposes Sensitive Employee Information In December 2025, Dot Foods, Inc., North America’s largest food redistributor, detected unauthorized access to a small number of employee email accounts. The breach, which occurred between December 3 and 4, 2025, involved an attacker viewing sensitive attachments containing personally identifiable information (PII). After securing the affected accounts, Dot Foods launched an investigation with cybersecurity experts, confirming on December 15, 2025, that exposed data included names and Social Security numbers. The company notified impacted employees on December 17, 2025, with written notices sent beginning January 7, 2026. Approximately 6,374 individuals across the U.S., including residents of Maine and Massachusetts, were affected. Dot Foods offered 24 months of complimentary credit monitoring and identity restoration services through Norton LifeLock to those impacted. Legal firms, including Shamis & Gentile P.A., are investigating potential class action lawsuits, assessing whether the company implemented adequate data protection measures. The incident underscores the risks of email-based breaches in supply chain and distribution sectors, where even limited access can expose critical employee data.