United Natural Foods Outage Disrupted Ordering for Thousands of Grocers

United Natural Foods Inc., a distributor supplying Whole Foods and thousands of grocery retailers across North America, suffered a cyberattack on 5 June 2025 that forced critical systems offline. Electronic ordering and invoicing were disrupted, producing cancelled shifts, delayed deliveries and reduced sales volume. The company reported that customer and health data were not compromised, and expected its cyber insurance to cover related costs.

This is the availability argument in its most legible form. There is no affected-individual count. There is no notification. On every register this corpus surveys, this incident is close to invisible — and the consequence was that grocery shelves in another company’s stores were not restocked.

It sits directly alongside 25-0902, where a manufacturer could not manufacture. The difference is that a car delayed by five weeks is an inconvenience, and a food distribution network interrupted is a category of infrastructure most people assume is more robust than it is.

The warehouses were full. The lorries worked. The drivers were available. What stopped was the ability to record what had been ordered, allocate stock against it, and generate the paperwork that lets goods move and be paid for.

Modern distribution operates on volumes that no manual process can reconstruct — tens of thousands of line items across thousands of destinations daily. The manual fallback that this desk keeps recording as a wasting asset at 26-0727 and 25-0902 has not degraded here so much as become arithmetically impossible.

A grocery retailer that lost deliveries was not attacked, holds no contract governing its supplier’s security, and had no visibility into it. Shift workers whose hours were cancelled were employed by a third party.

And unlike the data cases, there is no notification obligation running in their direction at all. A retailer learns its supplier has been attacked by observing that nothing arrived.

That the company expected insurance to cover the cost is worth recording without cynicism: this is what business-interruption cover is for, and it worked.

It also transfers the cost to a party who prices it, which is one of the few functioning feedback mechanisms in this corpus — and one whose second-order effects this desk filed at 25-0728.