Cyberattack Disrupts Operations at Whole Foods Supplier United Natural Foods

United Natural Foods Inc. (UNFI), a major U.S. grocery distributor and primary supplier to Whole Foods, experienced a cyber incident that has disrupted operations across its network. The company revealed in a regulatory filing that it proactively shut down certain systems on June 5 after detecting unauthorized activity. As a result, its ability to fulfill and distribute customer orders has been temporarily affected, and further disruptions are expected as it works to restore operations.

A spokesperson for Whole Foods acknowledged the impact, stating that the grocery chain is actively working to restock shelves. The incident has already had financial repercussions—UNFI shares fell over 8% during the June 10 trading session, ultimately closing down nearly 7% at $25.94. While specific details about the cyber activity were not disclosed, such network shutdowns are commonly linked to ransomware attacks.

This disruption is part of a broader trend, with major retailers in both the U.S. and UK—such as Harrods, Co-op, and Marks & Spencer—also recently experiencing cyber incidents. Though the FBI has not commented, the recurring pattern underscores the growing cybersecurity risks in retail supply chains.

As the largest publicly traded distributor of organic and natural foods in North America, UNFI’s operational health is closely tied to retailers like Whole Foods. With an eight-year distribution agreement in place, any prolonged disruptions could affect product availability and logistics well beyond this single incident.