Cyberattack on grocery supplier reveals fragility of US food supply
Hackers infiltrated one grocery distributor, and within days, there were bare shelves at stores around the country and even some pharmacies unable to fill prescriptions.
That's not the beginning of some thriller novel. It's the real events that played out earlier this month as major wholesale distributor UNFI, dealt with a cyberattack. But the moral of the story is already clear: The nation's highly consolidated food supply is in need of stout digital defenses to protect it.
'It pretty much exposes the fragility of our whole grocery system,' said Gregory Esslinger, a distribution expert, brand adviser and former UNFI manager. 'It's a national security issue, honestly.'
Based in Providence, Rhode Island, UNFI has about $31 billion in revenue and supplies 30,000 stores nationwide.
'It's been years, but they're still gradually integrating the SuperValu systems,' Esslinger said of UNFI. 'When you integrate systems, you potentially open doors to issues like this.'
While operations at the country's largest publicly traded grocery wholesaler have edged back to normal after UNFI detected the attack June 5 and shut down its ordering systems, preventing and better responding to the next hack will be the greater test.
'If it happens again, that would be the end of them,' Esslinger said. 'The confidence would be shattered.'
Having a handful of big suppliers like UNFI distribute the majority of the nation's groceries can help keep the price of food down, but it carries enormous risk when something goes wrong. Every part of the supply chain should take note of what happened and revisit their security plans, experts said.
'If you're in the industry, this is a great opportunity to take this to the board, ask for the budget, ask for what you need to mitigate the risks,' said Cliff Steinhauer, director of information security and engagement at the National Cybersecurity Alliance. 'You know the phrase, 'Don't let a good crisis go to waste.' I hate to say that, but you can take incidents like this and quantify it.'
Steinhauer and others believe the attack on UNFI was likely ransomware. Typically, that means a hacker has been able to access and lock up key systems, promising to free them only after the target pays a ransom.
'It does have all the telltale signs of a ransomware attack because the apparent effects are so widespread,' said Adam Marrè, the chief information security officer at the Minnesota-based cybersecurity firm Arctic Wolf.
But the company has released few details. UNFI on Wednesday declined to answer questions about the nature of the attack 'as the investigation is ongoing.'
'We've made significant progress toward safely restoring our electronic ordering systems,' the company said in a statement.
UNFI distribution centers are again taking orders and making deliveries as of Sunday.
Beyond the threat of Americans being unable to access food, attacks like these are also devastating to the company. Every moment of downtime in the logistics business is financially costly. Guggenheim analysts took down their quarterly sales estimate for UNFI by $250 million, a projected 3% hit to the wholesaler's top line. UBS analyst Mark Carden wrote the impact could last much longer.
'We do see some risk to customer retention,' Carden wrote. 'We expect disruption to UNFI's (revenue) to persist over the next few quarters.'
It's that kind of damage that makes grocery distributors and other key links in the supply chain such attractive victims for hackers.
'Ransomware actors target industries more likely to pay than not pay,' Marrè said. 'It appears they chose not to pay the ransom, which we recommend and so does law enforcement, but we also understand the business and life-saving realities surrounding that decision.'
The UNFI attack follows other critical infrastructure hacks like the Colonial Pipeline in 2021. Any other companies those spooked should take precautions and practice response plans, Marrè said.
'Prevention is great,' he said. 'But at the end of the day, the ability to detect and respond to an incident is a must. There needs to be backup plans and alternates in your supply chain.'
Esslinger said a number of factors might have contributed to the UNFI cyberattack and resulting shutdown, which stalled deliveries and, in some warehouses, saw employees taking orders on pen and paper.
'It's some lack of foresight or planning,' he said. 'The other train of thought is they recently laid off a number of people and outsourced some roles. Did that open the door?'
'UNFI regularly evaluates and adopts new tools and technologies as appropriate to strengthen our information security program to address evolving threats,' the company said in a statement, 'and we are continually taking steps to further enhance the security of our systems.'
Copyright (C) 2025, Tribune Content Agency, LLC. Portions copyrighted by the respective providers.
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Business Insider
33 minutes ago
- Business Insider
Meet America's typical live-at-home 20-somethings
Your parents' basement might be looking pretty good these days. In 2023, around 40% of younger Americans lived with their parents. Living with mom and dad is a popular safety net for Gen Zers who face steep housing costs, expensive higher education, and a shaky job market. "If you have the luxury of being able to move back home and pay less for rent, groceries, and other basic bills and put some money away in an emergency fund or towards other big financial goals, it can be a really big deal," Matt Schulz, chief consumer finance analyst at LendingTree, told Business Insider. BI examined the demographics of America's live-at-home young adults — the 42% of 18- to 30-year-olds who lived with at least one parent — using the 2023 American Community Survey, available from the University of Minnesota's Integrated Public Use Microdata Series. So, who made up that 42%? The charts below show the young adults who were more likely to be living at home. A majority of young adults living with at least one parent were men Over half of young adults living with at least one parent were men, while just under half of young adults not living with a parent were men. There's also a cultural element to multigenerational living. Pew Research Center found Black, Hispanic, and Asian young adults in the US were more likely than white young adults to live with their parents. Young adults living with at least one parent were more likely not to be in school The share of young adults living with at least one parent in the household who were in school was about double that of those living on their own — 39% compared to 20%. They're less likely to have a college degree Fourteen percent of young adults with at least one parent in the household had a bachelor's degree as their highest educational attainment, compared to 27% of those without a parent. Single young adults were more likely to live with at least one parent More young adults without a parent in the household were married than those living with at least one parent. Nearly all young adults living with at least one parent were never married or single, at 96%. They're not stay-at-home kids; they're more likely to be working than not Almost two-thirds of young adults with at least one parent in the household were employed, compared to 82% of young adults without a parent in the household. The share of young adults living at home who were out of the labor force — that is, neither employed nor looking for work — was nearly double that of those living on their own. While many were employed, they weren't earning as much as those not living with a parent On average, employed young adults with at least one parent in the household weren't working as many hours or making as much money as their peers who didn't have a parent in the household. According to Pew Research Center researcher Richard Fry, who authored a recent report on where in the country younger Americans live with their parents, young people are more likely to live with their parents when jobs are hard to come by and wages are stagnant. Pew previously found the share of people living in multigenerational households surged during the Great Recession and continued rising afterward. Living at home can also mean being disconnected from work and school There are those who choose to live at home for family connection and financial convenience, and there are others who don't have a choice. So-called disconnected youth who aren't employed or in school made up about 11% of the 16 to 24 age group in 2022, per a 2024 report from the research firm Measure of America. This cohort was more likely than their peers to live in poverty, lack health insurance, and receive government aid. Minorities and young people of color have higher rates of disconnection. "These are creative young people who, for a whole host of reasons, haven't had the opportunities or the support they've needed to explore what they want to do and figure out how to transition to adulthood in a way that's exciting for them," said Megan Millenky, a senior research associate at MRDC who studies youth development. In an unsteady economy, it's unlikely that Gen Z and younger millennials' interest in living at home will fade anytime soon. And, as Millenky said, the group reflects "quite a spectrum" of America's socioeconomic ladder.
CNN
42 minutes ago
- CNN
Minnesota lawmaker who survived shooting shares harrowing account of how the attack unfolded
Crime Gun violenceFacebookTweetLink Follow Minnesota state Sen. John Hoffman and his wife, Yvette Hoffman, shared details of the harrowing morning nearly a week ago when a man in a silicone mask who knocked on their door and identified himself as a police officer shot them repeatedly. In a statement released Thursday night and obtained by CNN affiliate KARE, the couple publicly describes for the first time the targeted shooting in their Champlin, Minnesota, home that left them critically injured. The night before the shooting, the Hoffmans had returned home from a dinner hosted by the Minnesota Democratic-Farmer-Labor Party and went to bed, the statement said. But they were awakened around 2 a.m. Saturday by someone pounding on the front door and shouting, asking to enter and identifying himself as a police officer, the family recounted. When the door opened, the couple and their adult daughter, Hope, were standing in the entryway. When the shooter pointed a gun directly at John Hoffman, the senator lunged at the gunman, and he was shot nine times, according to the statement. 'As John fell, Yvette reached out to push the man and shut the door,' and 'she was also hit eight times by gunfire,' the statement said. That's when Hope Hoffman raced to shut the door and secure the lock. She then called 911, telling the operator the senator had been shot in his home, triggering 'the notice to public safety officials that a politically-motivated act was potentially underway,' the family said. Prosecutors say suspected gunman Vance Boelter visited the homes of at least four Minnesota lawmakers, attempting to kill the Hoffmans and fatally shooting state Rep. Melissa Hortman and her husband, Mark Hortman. After the shooting, both John and Yvette Hoffman underwent surgery, according to officials. John Hoffman 'is in critical but stable condition; Yvette Hoffman is in stable condition, as well,' the family statement said. Minnesota Gov. Tim Walz told reporters at an event Thursday he expected Yvette Hoffman to be released from the hospital that day. No one by Yvette's name is currently at Mercy Hospital, where she had been treated after the shooting, a spokesperson with Allina Health told CNN. Earlier this week, Yvette Hoffman told US Sen. Amy Klobuchar in a text message that she and her husband were 'incredibly lucky to be alive,' Klobuchar shared on her social media. Yvette said at the time her husband had endured 'many surgeries' and is 'closer every hour to being out of the woods.' Boelter, 57, allegedly had a hit list of dozens of targets, which were largely Democrats or figures with ties to Planned Parenthood or the abortion rights movement, officials said. The search for Boelter lasted 43 hours and was the largest manhunt in Minnesota history. He faces six federal charges and four state charges. The Hoffman family said in their statement they are deeply grateful 'for the first responders and for all those in law enforcement who worked so quickly, professionally and selflessly to safeguard others and to apprehend the shooter, starting with our own officers in Champlin and Brooklyn Park.' They added that they are 'heartbroken' by the killing of Melissa and Mark Hortman. Hope Hoffman went to school with their daughter, Sophie Hortman. 'We know that they – along with Colin Hortman - will have each other's support as we all work through the devastating consequences of that horrific night,' John and Yvette Hoffman said. A GoFundMe account benefiting the Hoffman family was set up by Fernbrook Elementary School. The family said it will help them 'pick up the broken pieces of our lives.' 'We are uplifted by the prayers and support from so many across the state of Minnesota and the country: thank you,' the family said. While they realize that working in the public sector means sacrificing a certain level of privacy, the Hoffmans said they are now 'grappling with the reality that we live in a world where public service carries such risks as being targeted because someone disagrees with you or doesn't like what you stand for.' 'As a society, as a nation, as a community, we must work together to return to a level of civility that allows us all to live peacefully,' the statement said. 'The future for our children depends on that. We will be praying for that work and appreciate all those who will join with us.'
Boston Globe
an hour ago
- Boston Globe
The guy helping to ‘bring hell' to Boston? He's from Boston.
Over the past weeks, many Americans have taken to the streets to protest the deportation of coworkers, family, schoolmates, and neighbors — and in some cases to protest the existence of ICE. At the same time, Get The Gavel A weekly SCOTUS explainer newsletter by columnist Kimberly Atkins Stohr. Enter Email Sign Up For Lyons, the mission remains simple: enforce immigration law. Advertisement While criminals are the priority, 'everything's on the table,' he told me in a conference room at ICE headquarters in Washington, D.C., this week. And it appears he means it. From The agency is acting more broadly than it did under President Joe Biden, who banned collateral arrests — detaining illegal immigrants who were found while in pursuit of migrants with criminal records. 'If more agencies had just turned people over in a confined setting [law enforcement custody], we wouldn't be out in the community. We're going to bump into more people. We can't walk away from them,' Lyons said. That was the same justification ICE used last month when its agents Advertisement Trump officials have zeroed in on progressive-led places like Boston and Massachusetts in an effort that partially feels like political retribution for sanctuary policies. The president's border czar, Tom Homan, threatened to But Lyons, who worked in immigration enforcement in Boston for four years, sees the pressure less as political, and more as self-inflicted. Massachusetts often releases immigrants charged or convicted with serious crimes instead of handing them over to ICE, authorities often But that isn't Lyons' only gripe. 'Lunn just says you can't hold anybody on our detainers,' he said. 'But that doesn't mean the Mass. State Police can't pick up the phone and say, 'Hey, we got this guy on the side of the road.'' Advertisement He claimed that some of the state's political leaders obstruct this cooperation. But sometimes police unofficially give ICE their support. He gave an example from Joint Base Cape Cod, which served as a temporary migrant shelter. Lyons said that a State Police official claimed they found a 'guy that's wanted for murder in Venezuela,' but that they weren't allowed to turn him over to ICE. But a law enforcement official told him: 'If you magically show up at the front gate, we'll give him to you.' Other local police departments have quietly reached out for help, he says, leaving ICE to take the heat when they detain people. That is what Lyons told me happened during Martha's Vineyard has six different police departments, and doesn't have one police chief. The county sheriff Robert Ogden told me that he didn't have any prior knowledge of the recent operation. I reached out to Lyons after the interview and was told that some police departments on the Vineyard 'cooperate, a few don't.' The ability to cooperate with local officials to track down criminals is personal for Lyons. He says he lost a family member some years back to a fentanyl overdose. When investigators tried to pinpoint the source, it was 'tracked to a Dominican drug dealer that had been previously deported from my office,' he said. 'Night after night after night, Lawrence PD, Lowell PD, Methuen, Boston, have [custody of] these fentanyl dealers, three or four times,' Lyons contends, and many of them have reentered the country after deportation. Advertisement Can this system that both parties claim to hate be fixed? Any ICE director 'would say we are totally open to congressional rewrites of the law,' he said, and that streamlining would make it easier to focus on criminals. Too many Biden-era migrants were promised a chance at asylum – which he called a 'false hope' because many are in a state of legal limbo. A better system would allow some migrants to apply for asylum from their home country rather than making the dangerous trek to the US, then waiting years in immigration court. But until reform comes, Lyons is sticking to the law. He gave an example from his time as a police officer in Florida: Stopping a dad on the way to work with a busted taillight only to find he also had a warrant on him for being delinquent on child support payments. 'You feel bad for that person, but it's still a law,' he told me. 'That's kind of the predicament I'm in.' Carine Hajjar is a Globe Opinion writer. She can be reached at
