Disclosures and evidence

Revision 3 of 3 · Evidence cutoff Jul 16, 2025, 12:00 AM UTC

20 prior statements preserved · 10 statements added. Attributed source statements retain the source’s qualifications.

What the company disclosed

  1. United Natural Foods stated: “We have identified unauthorized activity in our systems and have proactively taken some systems offline while we investigate. As soon as we discovered the activity, an investigation was initiated with the help of leading forensics experts and we have notified law enforcement. We are assessing the unauthorized activity and working to restore our systems to safely bring them back online. As we work through this issue, our customers, suppliers, and associates are our highest priority. We are working closely with them to minimize disruption as much as possible.”

Operational impact

  1. United Natural Foods stated: “We continue working steadily to safely restore our systems and provide the services our customers and suppliers know and expect from us. As of today, we're gradually bringing our ordering and receiving capabilities back online, with the goal of further increasing our capacity over the coming days. The investigation is ongoing with the support of leading forensics experts. Our customers, suppliers, and associates are our highest priority. We continue to work closely with them to minimize disruptions as much as possible.”

  2. United Natural Foods stated: “We have continued to make steady progress to safely restore our systems throughout the week and are now shipping and receiving products out of the vast majority of UNFI distribution centers. We expect to gradually increase our operational capacity over the next few days, including the ability to accept electronic orders. We will also continue to use manual workarounds to meet our customers’ needs wherever necessary.”

  3. United Natural Foods stated: “UNFI is receiving orders and delivering products to our grocery store customers across North America. Over the past few days, we’ve made significant progress toward safely restoring our electronic ordering systems, which will allow us to serve the customers that order through these systems in a more automated way and continue to increase our operational capacity. We are also using alternative processes to ensure our customers receive the products they need while we continue making progress to restore our technology capabilities.”

  4. United Natural Foods stated: “We have safely restored the core systems our retail customers and suppliers use to do business with us, and the incident has been contained. With our electronic ordering and invoicing systems back online, we are delivering products to grocery stores across our network at more normalized levels. We are grateful to all our customers and suppliers for their patience and partnership as our UNFI associates continue working to support their needs.”

  5. United Natural Foods stated: “We have identified unauthorized activity in our systems and have proactively taken some systems offline while we investigate. As soon as we discovered the activity, an investigation was initiated with the help of leading forensics experts and we have notified law enforcement. We are assessing the unauthorized activity and working to restore our systems to safely bring them back online. As we work through this issue, our customers, suppliers, and associates are our highest priority. We are working closely with them to minimize disruption as much as possible.”

  6. United Natural Foods stated: ““We are grateful to our customers, suppliers, and associates for their resilience and collaboration as we worked through a challenging period for all of us. With our operations returning to more normalized levels, we remain focused on adding value for our customers and suppliers while becoming a more efficient and effective partner,” said Sandy Douglas, UNFI’s CEO.”

Financial impact, scope and period

  1. United Natural Foods stated: “The Company is updating its full-year outlook to reflect its strong performance for the first three fiscal quarters of 2025 and the estimated costs and charges associated with the previously disclosed cyber incident. The Company estimates that the cyber incident will impact fiscal 2025 net sales by approximately $350 to $400 million, net (loss) income by $50 to $60 million, which includes the estimated tax impact, and adjusted EBITDA by approximately $40 to $50 million. These estimates do not reflect the benefit of anticipated insurance proceeds, which the Company expects will be adequate for the incident. The Company does not currently expect a meaningful operational or financial impact beyond the fourth quarter of fiscal 2025 aside from insurance reimbursement.”

  2. United Natural Foods stated: “The Company is updating its full-year outlook to reflect its strong performance for the first three fiscal quarters of 2025 and the estimated costs and charges associated with the previously disclosed cyber incident. The Company estimates that the cyber incident will impact fiscal 2025 net sales by approximately $350 to $400 million, net (loss) income by $50 to $60 million, which includes the estimated tax impact, and adjusted EBITDA by approximately $40 to $50 million. These estimates do not reflect the benefit of anticipated insurance proceeds, which the Company expects will be adequate for the incident. The Company does not currently expect a meaningful operational or financial impact beyond the fourth quarter of fiscal 2025 aside from insurance reimbursement.”

  3. United Natural Foods stated: “The Company is updating its full-year outlook to reflect its strong performance for the first three fiscal quarters of 2025 and the estimated costs and charges associated with the previously disclosed cyber incident. The Company estimates that the cyber incident will impact fiscal 2025 net sales by approximately $350 to $400 million, net (loss) income by $50 to $60 million, which includes the estimated tax impact, and adjusted EBITDA by approximately $40 to $50 million. These estimates do not reflect the benefit of anticipated insurance proceeds, which the Company expects will be adequate for the incident. The Company does not currently expect a meaningful operational or financial impact beyond the fourth quarter of fiscal 2025 aside from insurance reimbursement.”

Response

  1. United Natural Foods stated: “We have identified unauthorized activity in our systems and have proactively taken some systems offline while we investigate. As soon as we discovered the activity, an investigation was initiated with the help of leading forensics experts and we have notified law enforcement. We are assessing the unauthorized activity and working to restore our systems to safely bring them back online. As we work through this issue, our customers, suppliers, and associates are our highest priority. We are working closely with them to minimize disruption as much as possible.”

  2. United Natural Foods stated: “The investigation is ongoing with the support of leading forensics experts. Our customers, suppliers, and associates remain our highest priority, and we are sharing updates with them every step of the way.”

  3. United Natural Foods stated: “We have safely restored the core systems our retail customers and suppliers use to do business with us, and the incident has been contained. With our electronic ordering and invoicing systems back online, we are delivering products to grocery stores across our network at more normalized levels. We are grateful to all our customers and suppliers for their patience and partnership as our UNFI associates continue working to support their needs.”

Recovery updates

  1. United Natural Foods stated: “We continue working steadily to safely restore our systems and provide the services our customers and suppliers know and expect from us. As of today, we're gradually bringing our ordering and receiving capabilities back online, with the goal of further increasing our capacity over the coming days. The investigation is ongoing with the support of leading forensics experts. Our customers, suppliers, and associates are our highest priority. We continue to work closely with them to minimize disruptions as much as possible.”

  2. United Natural Foods stated: “We have continued to make steady progress to safely restore our systems throughout the week and are now shipping and receiving products out of the vast majority of UNFI distribution centers. We expect to gradually increase our operational capacity over the next few days, including the ability to accept electronic orders. We will also continue to use manual workarounds to meet our customers’ needs wherever necessary.”

  3. United Natural Foods stated: “UNFI is receiving orders and delivering products to our grocery store customers across North America. Over the past few days, we’ve made significant progress toward safely restoring our electronic ordering systems, which will allow us to serve the customers that order through these systems in a more automated way and continue to increase our operational capacity. We are also using alternative processes to ensure our customers receive the products they need while we continue making progress to restore our technology capabilities.”

  4. United Natural Foods stated: “We have safely restored the core systems our retail customers and suppliers use to do business with us, and the incident has been contained. With our electronic ordering and invoicing systems back online, we are delivering products to grocery stores across our network at more normalized levels. We are grateful to all our customers and suppliers for their patience and partnership as our UNFI associates continue working to support their needs.”

  5. United Natural Foods stated: ““We are grateful to our customers, suppliers, and associates for their resilience and collaboration as we worked through a challenging period for all of us. With our operations returning to more normalized levels, we remain focused on adding value for our customers and suppliers while becoming a more efficient and effective partner,” said Sandy Douglas, UNFI’s CEO.”

Dates and disclosures

  1. United Natural Foods stated: “UNFI Media Statement as of June 26, 2025”

  2. United Natural Foods stated: “UNFI Media Statement as of June 15, 2025”

  3. United Natural Foods stated: “UNFI Media Statement as of June 13, 2025”

  4. United Natural Foods stated: “UNFI Media Statement as of June 11, 2025”

  5. United Natural Foods stated: “UNFI Media Statement as of June 9, 2025”

  6. United Natural Foods stated: “July 16, 2025”

  7. United Natural Foods stated: “PROVIDENCE, R.I.--(BUSINESS WIRE)-- United Natural Foods, Inc. (NYSE: UNFI) (the “Company” or “UNFI”) today provided a business update, including a revised full-year outlook for its fiscal 2025 (52 weeks ending August 2, 2025).”

Disclosure evolution

  1. United Natural Foods stated: “Revised outlook reflects strong performance for first three quarters of fiscal year as well as the estimated impact of previously disclosed cyber incident. Previously disclosed performance through the third quarter vs. prior year:”

Qualifications and uncertainty

  1. United Natural Foods stated: “The investigation is ongoing with the support of leading forensics experts. Our customers, suppliers, and associates remain our highest priority, and we are sharing updates with them every step of the way.”

  2. United Natural Foods stated: “We have continued to make steady progress to safely restore our systems throughout the week and are now shipping and receiving products out of the vast majority of UNFI distribution centers. We expect to gradually increase our operational capacity over the next few days, including the ability to accept electronic orders. We will also continue to use manual workarounds to meet our customers’ needs wherever necessary.”

  3. United Natural Foods stated: “The Company is updating its full-year outlook to reflect its strong performance for the first three fiscal quarters of 2025 and the estimated costs and charges associated with the previously disclosed cyber incident. The Company estimates that the cyber incident will impact fiscal 2025 net sales by approximately $350 to $400 million, net (loss) income by $50 to $60 million, which includes the estimated tax impact, and adjusted EBITDA by approximately $40 to $50 million. These estimates do not reflect the benefit of anticipated insurance proceeds, which the Company expects will be adequate for the incident. The Company does not currently expect a meaningful operational or financial impact beyond the fourth quarter of fiscal 2025 aside from insurance reimbursement.”

  4. United Natural Foods stated: “| (2) | The outlook provided above is for fiscal 2025 only. The outlook is forward-looking, is based on management’s current estimates and expectations and is subject to a number of risks, including many that are outside of management's control. See cautionary Safe Harbor Statement below. Fiscal 2024 was a 53 week year. Net sales for fiscal 2024 were $30.4 billion on a comparable 52-week basis, excluding an approximate $582 million benefit from the additional week in fiscal 2024. Adjusted EBITDA for fiscal 2024 included an approximate $10 million benefit from the additional week in fiscal 2024. The estimated contribution from the additional week is calculated by subtracting one-fifth of the respective metrics for the last five-week period within the 14-week fourth quarter of fiscal 2024, as disclosed in the Company’s press release from October 1, 2024.”

Disclosure sources and provenance

  • United Natural Foods Publisher posted June 26, 2025Document form: PUBLIC_DISCLOSUREPublisher HTTPS source · Retrieved Oct 7, 2026, 7:48 PM UTC · Retained Oct 7, 2026, 7:48 PM UTC
    • Current issuer-published representation; historical exact bytes are unknown.
    • Independent publisher HTTPS origin; not native SEC acquisition, no EDGAR byte-equivalence established.
    • Frozen issuer CIK is subject association only; SEC filing/accession fields remain unavailable on this public-source record.
  • United Natural Foods Publisher posted July 16, 2025Document form: PUBLIC_DISCLOSUREPublisher HTTPS source · Retrieved Oct 7, 2026, 7:49 PM UTC · Retained Oct 7, 2026, 7:49 PM UTC
    • Current issuer-published representation; historical exact bytes are unknown.
    • Independent publisher HTTPS origin; not native SEC acquisition, no EDGAR byte-equivalence established.
    • Frozen issuer CIK is subject association only; SEC filing/accession fields remain unavailable on this public-source record.

Evidence limitations

  • Attributed publisher/researcher reports establish what was reported, not independent verification of criminal activity or unique affected humans.
  • Current captured representations support controlled retrospective disclosure views; actual historical byte snapshots are unknown.
  • BaitaPhish source coverage: No supported data-impact assertion was selected in this frozen evidence slice. Confidentiality impact, including data access or exfiltration, is not established by this reader; containment or recovery is not proof of no data compromise.